A list containing the majority of Citrix Receiver for iOS support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Receiver for iOS:

A list containing the majority of Citrix Receiver for Linux support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Receiver for Linux:

With XenApp 6.5 nearing EoL in June 2018, organisations around the world are planning an upgrade to XenApp and XenDesktop 7.x. While the move from one version of 7.x to another could be considered an easy in-place upgrade, the shift from 6.x to 7.x is a full-blown platform migration.

The reason for this is that there are many functionality, configuration and architectural changes in 7.x. This necessitates Citrix administration teams to be educated, trained and prepared to deal with the changes the migration entails. There are many new components introduced in 7.x, replacements in functionality from 6.5 to deal with, and new capabilities and enhancements in 7.x to get trained on. Furthermore, 7.x does not support some legacy operating systems and hypervisors. So, the migration to 7.x will also involve upgrading the supporting infrastructure components. All this makes the migration to 7.x a time-consuming and resource-intensive project.

eG Innovations, in conjunction with DABCC conducted a Citrix Migration Survey between November 2017 and February 2018 to understand how organisations around the world are dealing with this Citrix migration. The results of this survey – containing the insights from 795 Citrix professionals – were prepared as a graphical report and also presented to the Citrix community through a webinar. I was honoured to co-present on this webinar with both Vinod Mohan, Sr. Product Marketing Manager and Srinivas Ramanathan, CEO of eG Innovations.

Read Survey Analysis Report | Watch Webinar Recording

I wanted to use this opportunity to create a helpful FAQ article for Citrix administrators based on the answers to questions that appe

ared during the webinar. If you have any additional questions, use the comments section!

Question 1: How much time should we plan for the entire migration process from 6.x to 7.x?

An answer to this question depends on a lot of factors. Factors to take in to account are:

• How many applications do you have to migrate?
• How many desktops do you have to migrate?
• How many users are there to be migrated?
• How familiar are you already with the new 7.x components?
• Are you deploying new operating systems such as Windows 10 and Windows Server 2016?
• Are you purchasing and building new hardware such as hypervisors or thin clients?
• Are you deploying App Layering and layering all applications?
• How long will your Proof of Concept run for user acceptance testing?

Now you can probably tell why no answer will ever be the same for two organisations.

Question 2: Has anything changed in licensing between 6.x and 7.x?

Subscription Advantage and Software Maintenance has now been included in a new offering for customers called Customer Success Services. The XenApp and XenDesktop licenses remain the same. You can purchase XenApp Concurrent licenses or XenDesktop Concurrent/User Device licenses. Product versions such as Enterprise and Platinum for both XenApp and XenDesktop continue to exist.

It is worth noting that XenApp and XenDesktop 7.14.1 allows you to mix licenses together under the same site, a first in the 7.x platform. This allows you for example to mix XenApp Concurrent licenses with XenDesktop User/Device. It is important to note that the edition such as Platinum or Enterprise must be kept the same and cannot be mixed under a single site.

Question 3: What are the top 5 features of 7.x that we should be taking advantage of?

1. Adaptive Transport – This feature transports the ICA protocol over UDP. I’ve personally tested this myself and from testing found that a 45MB file copy over UDP with 200ms latency completed faster than a 45MB file copy over TCP with just 100ms latency!
2. Adaptive Display v2 – Here you can adjust policy settings so that H.264 codecs are used to compress moving parts of your screen such as video or other animated content, whilst ThinWire+ is used to deliver the solid parts such as text. This gives the best of both worlds because you aren’t compressing the full contents of your screen and consuming more CPU on the Citrix desktop, but you also aren’t forcing your network to send all data uncompressed either.
3. Receiver for HTML5 – Allows you to launch applications and desktops inside of an HTML5 enabled browser and you don’t even have to install Receiver on the machine. This could mean easier management of BYOD devices.
4. In-session watermarks – Released in XenApp and XenDesktop 7.17, this feature provides a way for you to overlay information on top of the Citrix session with details about the user that is connecting. This goes a long way to deterring users from misuse of corporate systems especially when working remotely, providing for a better way to protect your organisations information and data.
5. Remote PC (XenDesktop license only) – If you have a workstation at the office you can install the Citrix VDA software on to it, allowing you to connect to the workstation and make use of all the HDX technologies you normally use with XenDesktop. Being able to connect directly to your work PC from anywhere in the world is an excellent ability that is offered in XenDesktop 7.x.

Question 4: What are the functionalities from XenApp 6.5 that will be lost in XenApp and XenDesktop 7.x?

There isn’t much need to be worried here. In the early days of 7.x there were quite a few noticeable feature differences between 6.5 and 7.x. Today, with the latest release of 7.17, there are as reported by Citrix zero differences in features.

As an added plus, features such as Adaptive Transport, Browser Content Redirection, Receiver for HTML5, Adaptive Display v2, Application Groups, Hardware Encoding and more have all been added and are ready for to you to use, and improve your offering to the end-user!

Question 5: What features are missing in Citrix Director that was available in EdgeSight?

Director initially started off as a helpdesk tool and it was quite useful for monitoring user connection failures, failed servers or desktops, some historical reporting and managing active sessions.

In recent releases though we have witnessed Director evolve to a product that offers some new abilities such as:

• Alerting on failed connections, slow logons, failed desktops and so on.
• Ability to monitor GPU, CPU, RAM, IOPS.
• Ability to monitor processes for utilisation.
• Ability to provide custom reporting.

It is worth noting though that some of the newer features in Director are subject to licensing editions with some features being available under Platinum licensing.

What Director cannot do though is the in-depth monitoring of storage, hypervisors, networks and Citrix infrastructure components such as Provisioning Services and NetScaler. For this, you need third-party monitoring software.

If you want an in-depth review of Citrix Director, I suggest you read my article here.

Question 6: Can Citrix Director monitor NetScaler and components such as PVS and StoreFront?

No. For NetScaler management and monitoring, you need to look at NetScaler Management and Analytics. There is no current ability to monitor StoreFront or PVS.

Question 9: How would you carry out performance assessment to ensure XA/XD performance is not affected during and after the migration?

Question 7: Can we perform an in-place upgrade of 6.x to 7.x?

No, each component must be a new install. You will probably want to take this opportunity to deploy the 7.x components on newer operating systems too.

Question 8: Will I need to deploy new worker servers, or can I use existing ones and migrate them to 7.x?

You can use existing, so long as the 7.x version you are going to supports the operating system the worker servers run. For example, XenApp 7.16 does not support Windows Server 2008 R2.

Question 9: How would you carry out performance assessment to ensure Citrix performance is not affected during and after the migration?

I recommend you establish before and after baselines. Capturing baselines of the current 6.x environment, and then comparing to baselines captured during and after the migration has been completed. This will allow you to determine if user experience is being impacted or not during and after the migration.

Baselines should be focused around:

• Logon times
• Application launch times
• Citrix management server resource consumption
• Citrix desktop resource consumption
• Hypervisor resource consumption
• Network resource consumption
• Storage resource consumption

Question 10: What are the new components in XenApp and XenDesktop 7.x that need to be deployed, which were not available in XenApp 6.x?

The architecture changed in 7.x, however there are some similarities in 7.x. A typical XenApp and XenDesktop 7.x site consists of:

• StoreFront servers – This component is built on IIS and provides a web portal for users to log on to and access their desktops and applications.
  • Similar to Web Interface
• Delivery Controllers – This component speaks to SQL, broker connecting users to desktops and applications, power manage Citrix desktops and so on.
  • Similar to Data Collectors
• License Server – Only one can exist per site.
• Director – This component allows you to monitor user connection failures, monitor desktop or server failures, monitor logon times, produce reports, manage connected user sessions and more.
  • Similar to EdgeSight

Question 11: Do you recommend moving to Citrix Cloud? Does it help with the cost? What are the gains and losses?

I don’t specifically recommend any one route over another as all types of Citrix deployments have their own positives and negatives depending on the type of your organisation and the requirements.

• If you don’t fancy managing StoreFront, Delivery Controllers etc. and having to deal with upgrading and maintaining these components, look towards the XenApp and XenDesktop Service.
• If company policy dictates that you must remain on a single version of XenApp and XenDesktop for several years, look at deploying XenApp or XenDesktop 7.15 LTSR on-premises.
• If you must use Provisioning Services, look at deploying on-premises.
• If you want to host every bit of your Citrix infrastructure in the cloud, look towards Citrix XenApp or XenDesktop Essentials, or the XenApp and XenDesktop Service.

Question 12: I have legacy applications that must run on Windows Server 2008 R2. What is the latest version of 7.x that supports Windows Server 2008 R2?

The latest version of Citrix XenApp and XenDesktop that supports 2008 R2 is version 7.15. This version is also the latest Long Term Service Release version.

If you have any further questions on the topic of migration or need recommendations, please post them in the comments section below.

Here is a useful white paper, co-authored by Citrix and eG Innovations, that details some best practices to be followed while migrating to Citrix XenApp and XenDesktop 7.x and achieve peak performing applications and desktops: https://www.eginnovations.com/Citrix-Migration-Best-Practices

Here I discuss how to install and configure eG Enterprise version 6.3 on Windows Server 2016.

Introduction:

eG Enterprise is a complete end-to-end IT performance monitoring solution capable of monitoring VDI infrastructure, hypervisors, storage, servers, web applications, custom applications, and so much more. You can see the full list of supported platforms by clicking on this link: https://www.eginnovations.com/product/platforms-supported

Our main interest is that the solution can monitor Citrix deployments from Delivery Controllers and StoreFront to VDAs all in the 7.x FMA architecture. It can also go further down the stack to the hypervisors that host our Citrix VMs, the storage that these VMs run from and the network on which they communicate across.

The product itself quite simply consists of a Manager, Agent and backend database. Agents are installed on to the machines you want to monitor, that is, the Delivery Controllers, VDAs, StoreFront servers and so on. The Manager collects measurements from Agents, processes them based on configured thresholds and sends them to a backend database for archiving.

Measurements are monitoring pieces which run against machines such as your Delivery Controller to determine the health of many different components and services. For example, monitoring the disk space of a server would be performed by one measurement and measuring the response from SQL database queries would be another. The product ships with thousands of pre-created measurements that you get to choose for deployment to monitored servers or applications. Measurements are processed against thresholds and if that threshold is breached an alert can be generated and sent to a group of administrators in several ways.

Contents:

• eG Manager Hardware Prerequisites
• eG Agent Hardware Prerequisites
• eG Manager Database Prerequisites
  • Additional Database Prerequisites
• Supported Web Browsers for eG Manager Access
• Install eG Manager
  • Before you begin
  • The eG Manager
• Troubleshooting the eG Manager installation
• Configure SSL on eG Manager
• Install eG Agent
• Troubleshooting the eG Agent
• Configure eG Agent to trust the eG Manager SSL certificate
• Performance of eG Agent
• Configure browsers for use with eG Manager
  • Internet Explorer
  • Google Chrome
  • Mozilla Firefox
• Configure eG Manager Redundancy
• Agentless Monitoring
• Allocate more memory to eG Manager
• Allocate more memory to eG Agent
• How to back up and restore eG Manager
• Considerations when using eG Manager across environments

eG Manager Hardware Prerequisites:

eG Agent Hardware Prerequisites:

eG Manager Database Prerequisites:

Additional Database Prerequisites:

• When installing SQL, make sure that the collation is set to Case Insensitive and that the Simple Recovery mode is set. Also make sure that the database server has a tablespace with at least 100MB of space for hosting the eG database.
• You can configure pruning to purge any old data from the database periodically.
• Consider whether to set SQL authentication to mixed mode. A database user will be dedicated to storing measurements received from eG Manager in the database. You can either use a SQL account or Windows account. If using Windows, you have to pre-create the account and assign the necessary permissions as discussed further on in the topic.
• Information regarding the eG Managers database connection is maintained in the file eg_db.ini which exists under \manager\config\. By editing this file you can modify the database that the eG Manager will use.

Supported Web Browsers for eG Manager access:

• Internet Explorer 10, 11, Edge.
• Firefox v18+.
• Chrome v28+.

Install eG Manager:

Before you begin:

• Before you begin installing eG Enterprise, if you are going to use a SQL account to either create the database or the database user for storing measurements, set SQL authentication mode to SQL Server and Windows Authentication. If you don’t you’ll get a Cannot connect to database installation error.
• Make sure no other Tomcat server is installed on the eG Manager server.
• Install the manager on a dedicated host unless you have 5 or less agents running.
• Keep the Manager server close to SQL to minimise network bandwidth usage and response times.
• Keep the Manager server as close as possible to the agents deployed in your target environment(s).
• Create forward and reverse DNS lookups for the eG Manager server name.
• You can install a 32-bit version of eG Manager on a 64-bit machine, but the prerequisite here is to install a 32-bit version of the Java JDK.

The eG Manager:

• Handles communication with the database.
• Discovers and keeps an inventory of agents.
• Instructs agents on which measurements to run.
• Receives measurements from agents for permanent storage.
• Receives alerts from agents if measure thresholds have been breached.
• Determines if problems exist in your environment.
• Sends out email/SMS alerts of problems to configured recipients, and so on.

Right-click eGManager_win2016_x64.exe and select Run as administrator.

Click Next.

Click Yes on the License Agreement.

Setup at this stage detects if there are any pre-installed versions of the JDK on your machine. You can select an existing version if you are given the option. Otherwise, choose to use the default JDK (Java Development Kit) that is pre-bundled with the installation media. Version 1.7 is installed. Note that version 1.8 is not currently supported. Click Next.

You should have a static IP set against the eG Manager server. You can specify a different port from the default of 7077. The port can also be changed any time after install. Click Next.

Click No unless you have a requirement for East Asian languages.

Click Yes to SSL enable eG Manager.

Specify MsSql server and click Next.

Click Yes.

Click Yes.

Enter the name and port of your SQL server and click Next.

If you have SSL configured for SQL, click Yes, otherwise click No.

Click Yes to create a new database.

Enter a database name and click Next.

Enter details of an account that can create the eG Manager database. If you want to use a SQL account but not the sa account, then pre-create an account that has the following roles:

• Securityadmin,
• Serveradmin,
• Public.

You must use a strong password for this account or the eG Manager installation will fail (unless you have turned Enforce password policy off in SQL). A strong password is made up of 6 characters, numbers, lowercase and uppercase or non-alphanumeric characters such as # or &.

Click Next.

Enter an account name and password for the eG Manager database user account. This could be a domain account that has db_owner set against the eG Database. If you have mixed mode enabled and prefer to specify a SQL account, then one will be created by setup and made db_owner of the database. Click Next.

Specify an installation folder. I recommend you choose something such as C:\Program Files\eG Manager\. Click Next.

Review the installation details and click Next.

Finally click Finish and the server will restart to complete installation.

Once the server has come back online, you need to copy the license file for eG Enterprise to the bin folder. eG Manager will not start until you perform this step. The license file should be copied to C:\Program Files\eG Manager\eGurkha\bin or similar depending on where you installed eG Manager.

Now within the Start Menu, click on Start Manager. The following services are started during this process:

• eGmon – The Manager recovery process.
• eGurkhaTomcat – The core Manager process.

This step can take a minute or so. You will receive a message in the CMD window once the Manager has successfully started.

Once eG Manager has started, launch your web browser and browse to https://egurl.domain:7077. The default credentials are shown on screen.

Troubleshooting the eG Manager installation:

• If you cannot start the eG Manager after a successful installation, make sure you have a valid license copied to the bin directory as mentioned previously.
  • From CMD, change directory to bin and run command viewCert license to make sure that the license has not expired.
• If you cannot start the eG Manager after a successful installation, make sure the eG user has permissions to read and write to all the eG directories. Also make sure you are logged in as an eG user in the first place.
• Make sure you have not uninstalled the Java JDK, which would stop eG Manager from working completely.
• Check the error_log file under \manager\logs\ for information on what is going wrong.

Configure SSL on eG Manager:

By default, an installation of eG Manager that is SSL enabled comes with a pre-installed certificate.

In many cases, we will want to publish our own certificate and use that against eG Manager.

To do so, on the eG Manager server, we have to configure tomcat to use a certificate that we specify. Launch command prompt as an administrator and run command %java_home%. Doing so should return the path contained within this variable which in my case is C:\egurkha\JAVA\JDK.

If no variable has been set, make sure you have restarted the server after installation of the eG Manager as it will automatically create this for you.

Next change directory to the bin folder and issue command keytool -genkey -alias eGManager -keyalg RSA -keypass yourpassword -keystore eGManager.keystore -storepass yourpassword -keysize 2048 -validity 730.

Make sure that the Keypass and Storepass values remain the same and the validity will ultimately match what is defined in the certificate template we use later to issue the certificate from Active Directory Certificate Services.

A keystore file will be generated in the bin folder.

Next to generate a CSR run command keytool -certreq -alias eGManager -keyalg RSA -file eGManagerCSR.txt -keypass yourpassword -keystore eGManager.keystore -storepass yourpassword.

Make sure that the passwords for Keypass and Keystore are the same ones you specified when creating the keystore file.

The CSR will show in the bin folder, and we can now use this CSR to submit a certificate request to Active Directory Certificate Services.

Run command certreq -attrib “CertificateTemplate:WebServer” -submit C:\eGurkha\java\jdk\bin\eGManagerCSR.txt. Adjust the certificate template name and CSR location name to your own values.

When you are asked to save the certificate, save it to the bin folder alongside the existing keystore and CSR files.

Now we want to import the certificate to the keystore file, but first we have to import the root certificate in to the keystore file. It is best at this stage to copy the root certificate to the bin directory.

Run command keytool -import -trustcacerts -alias rootca -file root.cer -keystore eGManager.keystore -keypass yourpassword -storepass yourpassword.

Make sure to use the same Storepass and Keypass that was used during keystore creation.

Enter Yes and press Enter.

Now we can go ahead with importing the server certificate to the keystore.

Run command keytool -import -trustcacerts -alias eGManager -file eGCert.cer -keypass yourpassword -keystore eGManager.keystore -storepass yourpassword.

Make sure to use the same Storepass and Keypass that was used during keystore creation. You should be returned a Certificate reply was installed in keystore message.

Now we have to modify tomcat to use the newly created keystore file. Navigate to C:\eGurkha\manager\tomcat\conf and edit server.xml.

Locate the Define a SSL Coyote HTTP/1.1 Connector on port 8443 section.

Note that if this block is commented, it simply means that eG Manager was not SSL enabled during install and is only listening on HTTP port 8081. To SSL enable the eG Manager, uncomment this block.

Note that if you want to block HTTP communication in favour of HTTPS, comment out the Define a non-SSL Coyote HTTP/1.1 Connector on port 8081 block.

Locate parameter keystoreFile and update it with the full path to your keystore file. Update keystorePass with your previously chosen password. Save the file.

Edit start_manager.bat under C:\eGurkha\lib and make sure the URL towards the bottom of the file matches https://your-fqdn:7077/final/servlet/upload.

Under the [MISC_ARGS] section of eg_services.ini which exists under C:\eGurkha\manager\config, make sure that the URL for MailHomeUrl is correct.

Finally start the manager.

And upon browsing to the URL this time you will notice a secure connection can be made and the custom certificate is presented.

Install eG Agent:

Agents monitor the environment by running periodic tests which output measurements. These measurements are then used to determine the health of a system, application or network. Agents come in three different formats:

• Internal Agent – Internal Agents are installed on the same machines that they monitor and have the ability to run many tests. This will be the most common method of monitoring and is suitable for monitoring applications, servers, operating systems, etc. A single agent on a server can monitor any number of applications and also different types of applications (for example, web servers, middleware, messaging applications, enterprise applications, databases, etc.) running on it. Because of its multiple application support and one-agent-fits-all approach, this agent is also called a Universal Monitoring Agent.
• Remote Agent – Remote Agents are proxies for internal agents in the sense that they perform similar tasks – just that they are deployed outside of the target systems using protocols such as JMX, SSH, SMI-S, web services, APIs (e.g. virtual platforms), etc. for monitoring. This forms an agentless monitoring approach for servers and devices. Remote agents are typically used in cases where it is not recommended to install an internal agent – for example, on a VMware hypervisor where any software installation on the console operating system is to be avoided; or a storage device, where it is not possible to deploy an agent.
• External Agent – External Agents are mainly used for black box monitoring of network devices, servers, and applications. Typical functions include tracking network availability and responsiveness via PING tests and application availability and responsiveness by making TCP port connections. These agents also make protocol level requests for protocols such as HTTP, SMTP, FTP and other to report service availability and responsiveness. These same agents can be used to monitor network switches, routers, firewalls, printers and so on using SNMP. This also forms an agentless monitoring approach.

Note for Windows Server 2008: Before installing the agent on a Server 2008 host, make sure that the Visual C++ 2008 or above runtime engine exists. If you are using a 32-bit agent, then install the 32-bit Visual C++ 2008 runtime engine.

Download the appropriate agent for your operating system. Several versions exist such as eGAgent_win2008_x64.exe for Windows Server 2008/Windows 7 or eGAgent_win2012_x64.exe for Windows Server 2012/R2/Windows 8 and eGAgent_win2016_x64.exe for Windows Server 2016/Windows 10.

Right-click the agent installer and select Run as administrator.

Click Next.

Click Yes on the License Agreement.

Specify an install destination path and click Next.

Click Yes to configure the eG Agent to use SSL communication with the eG Manager.

With this optional question, if you choose Yes, the eG Agent will only communicate with eG Manager if the certificate eG Manager presents is trusted. If you choose No, the agent will communicate regardless of whether it trusts the certificate or not. If you click Yes, there are some procedures you have to carry out on the agent machine before it will trust the certificate. If you choose No, these procedures do not apply. To show you the procedures, I will click Yes.

Now enter the eG Manager FQDN and SSL port and click Next.

If you want to route communication through a proxy, click Yes and specify your proxy host details. Otherwise, click No.

Click Next.

You can assign nick names to agents which allows you to manage the agents via nick name rather than by hostname or IP address. This can be useful for identification purposes, or if multiple agents share the same IP address across different networks. In this case, I will click No. Nick names can be assigned at a later stage if required.

Click Finish.

After the agent has been installed, a reboot is not required. An agent will attempt to auto-start and communicate with the eG Manager but in my case, it will fail because I’ve instructed the agent to only communicate with a manager that is trusted, but I’ve not completed the steps required to trust the manager yet.

The error_log shows that the manager could not be contacted.

To trust the certificate, scroll down to the Configure eG Agent to trust the eG Manager SSL certificate section.

Troubleshooting the eG Agent:

• To start the agent, you must be a local administrator. There are two services that make up the agent:
  • eGAgentMon – Agent recovery process.
  • eGurkhaAgent – Core agent process.

If you are having trouble starting the agent, the first place to look is in the error_log file which resides under C:\eGurkha\agent\logs\.

Alternatively, you can turn on debug mode which records more error logs. Firstly, stop the agent.

Next run debugon.bat under the lib directory.

Start the agent again and two extra log files will be created:

• Agenterr.log – Runtime errors encountered by the agent are logged here.
• Agentout.log – Details of the tests ran and measures reported by the agent to eG Manager are logged here.

To turn off debug mode, simply return to the lib directory and run debugoff.bat.

If the eG Agent did previously work but has stopped, this may have occurred due to the Java Runtime Environment being uninstalled on the machine or JRE being upgraded. Reinstall JRE 1.7 to the same location.

Configure eG Agent to trust the eG Manager SSL certificate:

To trust the eG Manager certificate, firstly you must export the eG Manager certificate we generated earlier from the keystore. If you have the certificate file itself that you downloaded from Active Directory Certificate Services still residing in the bin folder then you can simply copy this certificate across to the eG Agent. Otherwise, follow the export step by logging on to eG Manager and running command keytool -export -alias eGManager -keystore eGManager.keystore -storepass yourpassword -keypass yourpassword -file ExportedCert.cer.

Make sure the Alias, Storepass and Keypass are the same values you specified when generating the keystore in earlier steps.

Next copy the certificate to the agent and open command prompt, and then change directory to C:\eGurkha\JRE\bin\ and run command keytool -import -file c:\eGCert.cer -alias eGManager -keystore C:\eGurkha\jre\lib\security\eGManager.keystore -storepass yourpassword.

Note that the certificate name in my case has been renamed by me from ExportedCert.cer to eGCert.cer so do not be confused. Also make sure the Alias, Keystore and Storepass values are the same as when you created the keystore file.

Type Yes and press Enter.

You should receive some output to confirm the certificate has been imported to the keystore. Make sure that value CN= matches your eG Manager’s fully qualified domain name.

Next start the eG Agent via Start Menu or run the batch file. This time the agent will start and communicate successfully with eG Manager.

Performance of eG Agent

I know, you hear the phrase “It depends” all the time right? Well, performance of the agent is dependent on various factors including:

• The number of components that are being monitored by the eG agent.
• Specific component types to be monitored
• Frequency of monitoring.
• Whether the agent is monitoring applications in an agent based or agentless manner.

With that said, an internal agent monitoring a single application on the server at a 5-minute frequency typically:

• Consumes 0.1-0.3 percent CPU.
• Generates around 0.05-0.2Kbps network traffic.
• Consumes around 100MB of disk space.
• Consumes around 10-15MB RAM in addition to that of the Java Virtual Machine. In total the eG agent process consumes around 30-50MB memory.

Configure browsers for use with eG Manager:

Since eG Enterprise v6.1.2, many changes were made to harden SSL communication with eG Manager. These changes include:

• TLS v1 being the default secure protocol for browsers to use during communication with eG Manager.
• Message signing algorithm changes in the default SSL certificate that is bundled with eG Manager if you SSL enable the install.
• The Cipher Suite definition has been bundled into the Tomcat server on which eG Manager runs.

Note that these changes are not available if you upgrade any SSL enabled eG Manager from a lower version to v6.1.2 and above. To avoid this, after an upgrade you must harden SSL communication with the upgraded manager. Steps to do this are found in the installation guide.

There are also some steps that must be performed on browsers, to ensure they are configured correctly to be used with eG Manager.

Internet Explorer:

• The document mode should be set to Edge (Default).
• Remove the eG Manager URL from Compatibility View and clear the check-boxes for Display intranet sites in Compatibility View and Use Microsoft compatibility lists.
• Security levels for the Intranet Zone should be set to Medium or Medium-high. If eG Manager is not in the Intranet Zone (for example if you are accessing the URL externally), then you should set the appropriate zone this URL falls under to Medium or Medium-high.
• Add the eG Manager URL to the pop-up blocker exceptions list.
• Configure Internet Explorer to use TLS and not SSL. Whilst modern Windows browsers and Operating Systems have SSL 3.0 disabled by default, it is easy to check by navigating to the Advanced tab of Internet Options.

Google Chrome:

• Google Chrome should be configured to use TLS and not SSL. Furthermore, the security levels for the relevant Zone should be set to Medium or Medium-high. You can use Internet Options in Internet Explorer to configure these settings, they will then take effect on Chrome.

Mozilla Firefox:

• SSL 3.0 is disabled by default. To confirm that TLS 1.1 or 1.2 is enabled, in the search bar type about:config, search for and select security.tls.version.min; make sure it is set to a value of 1.

Configure eG Manager Redundancy:

Redundancy allows you to configure a second eG Manager server so that a secondary management console can act as an active or passive standby for the primary console. Redundancy also allows agents to fall back to the secondary manager whenever the primary is offline.

The redundancy piece is an add-on, so you must make sure you are licensed to use clustering. To check your license, run command viewCert license from the bin directory.

Make sure Cluster Type is set to Active-Active.

To enable redundancy for eG Manager, firstly install eG Manager on a second server. This server doesn’t have to be Windows, it could be a Linux server to highlight that there are no restrictions as to where eG Manager can be installed in a redundant configuration. During installation, specify that you want to create a new database.

When you create a new database and once redundancy is in place, the primary database where your configuration and data is stored will be replicated to this new secondary database.

Once you have a second eG Manager server prepared, you have to run a batch file firstly on the Primary eG Manager server. The batch file is located in the lib folder. The batch file is called setup_cluster.bat and will ask a number of questions as shown in the screenshot.

Now run the same batch file on the secondary eG Manager server. The questions this time around are slightly different as you are asked to specify information about the primary manager.

One handy file to check to make sure cluster configuration is correct is the eg_managers.ini file under directory eGurkha\manager\config. This file will reside on the primary eG Manager server.

The same file will also reside on the secondary server. This file copy contains information on the primary server.

When you install agents, you point them towards the eG Manager primary server. From here on the agent will communicate with the primary manager server unless that manager goes offline, in which case the agent starts communicating with the secondary manager.

It is worth also noting that the secondary manager cannot be used to make configuration changes. If you need to make changes, you do so from the primary manager.

You can access https://localhost/final/admin/ReportingAgents.jsp to check the reporting status of agents to each manager that is part of the redundancy setup.

Agentless Monitoring:

If you have to monitor Microsoft Operating Systems and applications in an agentless manner, then in order to enable the eG remote agent to collect measurements from these applications using Perfmon counters, the following is required:

• A remote agent can monitor a Windows environment only if the agent is installed with an account that has administrative privileges over all the target hosts you want to monitor.
• NetBIOS should be enabled on the target hosts to be monitored.
• PerfMon should have at least READ access to the Perflib\LanguageID subkey on the remote computer. This key allows external access to PerfMon and is located under HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perfib\LanguageID. The 009 subkey is the English language.
• The Disk Performance Statistics Driver (diskperf) should exist on the target computer.
• Allow READ access explicitly to the user account for the following registry key and all subkeys: HKLM\SYSTEM\CurrentControlSet\Services\Diskperf.
• The monitored computer should be able to connect to IPC$. The following registry DWORD enables connecting to IPC$: HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters – REG_DWORD = AutoShareWks – Value = 0x1.
• At least READ access should be granted to the following registry subkey to allow you to remotely connect to the Windows Registry: HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg. The permissions on this key determine who can remotely connect to the registry. If this subkey does not exist, all users can remotely connect to the registry. To remotely connect to a registry, a user must have at least READ access to the winreg subkey on the target computer.
• At least READ access should be granted to the following registry key on the remote computer: HKLM\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\Perflib

Allocate more memory to eG Manager:

Since eG Manager runs as a Java process, the maximum heap memory that can be allocated to a 32-bit eG Manager process is limited to 1.5GB or 1/3rd of system memory, whichever is lower.

For a 64-bit manager on the other hand, 1/3rd of the total system memory is the maximum heap memory that can be allocated.

Where a large number of components are to be monitored, you may want to allocate more memory heap to the eG Manager process. In such a case, follow the steps below on your eG Manager server:

1. Edit file setEnv.bat which resides under the lib directory.
2. Search for the following entries:
   @set XMX=
   @set XMS=
3. The XMX an XMS values dictate heap memory allocations to eG Manager. If you want to increase the value to say 2GB, set the value to 2048.
4. Save the file.

Allocate more memory to eG Agent:

Since eG Agent runs as a Java process, the maximum heap memory that can be allocated to a 32-bit eG Manager process is limited to 1.5GB.

For a 64-bit agent on the other hand, 1GB is the maximum heap memory that can be allocated.

Where a large number of components are to be monitored by the eG Agent, you may want to allocate more memory heap to the eG Agent process. In such a case, follow the steps below on your eG Agent server:

1. Edit files debugoff.bat and debugon.bat which reside under the lib directory.
2. Look for entry -Xmx in both files and modify the value to something such as -Xmx1024M which would assign 1GB of memory to the eG Agent.
3. Save the file.

How to back up and restore eG Manager:

• Copy the eGurkha directory to unique location.
• If you want to restore the eG Manager to the same host that you took a backup from:
  • Replace the existing eGurkha directory with the backed-up version to revert to a previous version of eG Manager if that is your goal. You will have to stop and restart eG Manager during this procedure.
  • If you want to completely reinstall eG Manager on the same host, or move to a new host then:
    • Uninstall the existing eG Manager installation, install eG Manager with the same settings as the old manager, provide a dummy database and then replace the eGurkha directory with the backed-up version.
    • Run changeManagerSettings.bat and changeAgentSettings.bat files from the lib directory to change the IP address/hostname of the eG manager and agent.
    • Replace the old eG Manager license with a new license generated for the new IP address/hostname.

Considerations when using eG Manager across environments:

When deploying eG Enterprise in a NATed environment, there are some things you need to consider. For example, you may have agents located across multiple locations, behind different firewalls and connected via many VPN links or tunnels. Some common scenarios are listed below:

• Agent that is in a different location has to communicate with the eG Manager via the Manager’s public IP address:

  • When installing the agent point it toward the eG Manager’s public IP. The Manager itself may be using a private IP, but NAT will make sure traffic reaches the destination.

Note: If the Agent has a private IP and eG Manager has an IP in a different network, set Authentication to Off under Agents -> Settings -> Communication in eG Manager. You do this because the Agent is not accessible to the eG Manager server in order to verify the Agent via IP directly.

• eG Manager manages agents on multiple private networks and the same private IP could be used between different servers across the different networks:

  • In this case if a server in one network that eG Manager is monitoring has the same private IP as a server in another network, you can identify the monitored servers using nicknames. Add each server to eG Manager using the same IP but with different nicknames.

Note: You should also check if eG Manager is configured to identify agents via their IP address or nicknames. Within eG Manager, navigate to Configure -> Settings and check the status of the Verify if agent is reporting from configured IP parameter in the MANAGER SETTINGS page. If the flag is set to No, then eG Manager is identifying agents using their nicknames and not IP address. If set to Yes, then changing this to No may break agent communication if they were not assigned a nickname during install. Therefore, before switching the setting to No you should set a unique nickname on each agent.

Since manual nickname assignment could take a long time to perform, eG Enterprise does provide a more automated solution found in their documentation.

eG Enterprise is an end-to-end IT performance monitoring solution. For more information on eG Enterprise, visit www.eginnovations.com. You can get a full-featured free trial for 15 days.

In this article I explain steps that can be taken to secure management access to NetScaler ADCs. I also explain a common scenario where two NetScaler’s residing in a highly available configuration each need their own unique certificate for HTTPS management communication.

As a best practice, you shouldn’t enable management access on Subnet IPs even though that is possible. Many administrators do so especially when NetScaler is part of a highly available setup because it allows you to always reach the primary instance just by browsing to the SNIP address.

Instead, it is better to only allow management access to NetScaler IPs, also referred to as the management IP address of NetScaler. Other steps that are recommended to secure access to NetScaler is:

• Restrict access to the NetScaler IP using firewall rules so only certain management machines and personnel can browse to the NetScaler IP.
• Block port 80 TCP access to the NetScaler IP by again using ACLs either on your firewalls that sit in-front of NetScaler or on the NetScaler itself.
• Enable Secure Only on NetScaler so that only HTTPS communication is allowed to the appliance for management access.
• Create unique certificates on each NetScaler appliance that is part of an HA configuration and prevent those certificates from synchronising to their partner.

In this article you are shown how to:

1. Configure ACLs directly on NetScaler to allow just a single management server access to the management portal of NetScaler over HTTPS.
2. Configure NetScaler to allow only secure access to the management GUI.
3. Install certificates on each appliance whilst blocking synchronisation to ensure browsers don’t flag certificate errors.

Contents:

• Configure ACLs on NetScaler to allow management access from a single server
• Configure NetScaler to allow secure access only
• Install unique certificates on each NetScaler that is part of HA

Configure ACLs on NetScaler to allow management access from a single server:

You firstly need to make sure that internal management communication is allowed. By default it is, but by running show l3param on the CLI of NetScaler you can confirm that implicitACLAllow is set to ENABLED.

Next navigate to System -> Network -> ACLs -> Extended ACLs -> Add.

In this scenario we allow one single management server access to VPX1. Specify a Name, set the Priority to 1, specify the management server IP under Source IP Low and the destination NetScaler IP of VPX1 under Destination IP Low.

Set the Protocol to TCP and enter 443 under Destination port low.

Create a second ACL this time with a Priority of 2 and Destination IP Low set to the NetScaler IP address of VPX2.

Specify TCP and 443 as before.

Create a final ACL for denying all other traffic. Specify a Priority of 100.

Enter the VPX1 and VPX2 NetScaler IP addresses under Destination IP Low and Destination IP High. Specify TCP under Protocol and 443 under Destination port low.

Whilst the ACLs have been created, they have not yet been applied. To apply, select Action -> Apply.

Click Yes.

Test access to make sure that you can browse to the management portal of each appliance using your elected management server.

Configure NetScaler to allow secure access only:

By default, you can browse to the NSIP of NetScaler from your web browser over TCP port 80 or 443. By enabling Secure Access Only, we make sure that NetScaler does not accept connections over port 80. To enable this, log on to NetScaler and navigate to System -> Network -> IPs, click on the NetScaler IP and towards the bottom check Secure Access Only. Click OK.Click Yes.The page at this stage will be reloaded over an HTTPS connection.

Note that you must also enable Secure Access Only on the secondary appliance.

Install unique certificates on each NetScaler that is part of HA:

By default, both appliances share the same ns-server-certificate certificate/key pair. This certificate is synchronised between both appliances and the common name is the same.

If we were to browse to the NetScaler management address over HTTPS, by default we get a certificate warning because the common name of this default certificate does not match the URL we specify.

In the event we have two NetScaler appliances in a highly available configuration, we have to make sure that each NSIP management address is protected by a unique certificate that matches the hostname or identifier of the appliance. That causes some challenges because by default certificates in a high availability scenario replicate between both appliances.

So, for example, if I have a certificate for NetScalerOne and I’ve configured NetScaler to use this certificate for the management URL, that configuration will replicate to the second appliance so any browsing to the second appliance will bring about a certificate mismatch error because the certificate won’t match the secondary NetScaler’s management URL.

To get around this, we create two unique certificates (one for each appliance) and store them in a directory on NetScaler that is not synchronised between both appliances.

To begin, on the primary NetScaler navigate to Traffic Management -> SSL -> SSL Files -> Keys -> Create RSA Key.

Specify a name. Set the Key Size(bits) to 2048 or above if required, set PEM Encoding Algorithm to DES3 and specify a PEM Passphrase. Click Create.

Click on the CSRs tab and click Create Certificate Signing Request (CSR).

Specify a new name for the CSR as below. Under Key Filename browse and select from the appliance the RSA.key file that was created earlier. Enter the PEM Passphrase set against the private key. Select SHA256 as the Digest Method. Under Common Name enter the FQDN of your primary NetScaler and then enter an Organization Name.

Specify a value for Sate or Province, Country and then click Create.

Select the new CSR and click Download.

Against your Active Directory Certificate Services server, issue the certreq command against the CSR you created for the primary NetScaler so that you are issued a certificate.

Save the certificate with an appropriate name to identify the certificate as being for the primary NetScaler.

On your primary NetScaler, launch a program such as WinSCP and navigate to /flash/nsconfig/. Create a new directory naming it SSL_NOSYNC.

Within the SSL_NOSYNC directory copy the RSA.key key and certificate you have just been issued by your Certificate Authority.

Rename the certificate to a name such as NSIPCert.cer. This certificate name will be the same on your secondary appliance. Delete the RSA.key key and CSR file from /nsconfig/ssl/ on your primary appliance.

At this stage repeat the same steps on the secondary appliance. You will be generating a new RSA key called RSA.key, generating a new CSR and submitting the request to your Certificate Authority. You will then copy both the issues certificate and RSA.key to the newly created SSL_NOSYNC directory on the secondary appliance and deleting the original RSA.key and CSR files from /nsconfig/ssl/.

Now on both primary and secondary appliances issue command add ssl certKey NSVPXCert -cert /nsconfig/SSL_NOSYNC/NSIPCert.cer -key /nsconfig/SSL_NOSYNC/RSA.key -Password yourRSAKeypassword.

Save the running configuration by issuing command save nsconf.

The certificate will show up on each appliance as below. Primary NetScaler will contain a certificate with Common Name set to the FQDN of the primary appliance and the secondary appliance will contain a separate certificate with Common Name set to the FQDN of the secondary appliance.

Next navigate to Traffic Management -> Load Balancing -> Services -> Internal Services and click into nshttps-127.0.0.1-443.

Click on 1 Server Certificate.

Select the existing ns-server-certificate and click Unbind.

Click Yes.

Click Add Binding.

Click Click to select.

Select the newly imported certificate and click Select.

Click Bind.

Click Close.

Click Done.

Now repeat the same steps on the remaining appliance.

To test, browse to the primary and secondary NetScaler, confirming that you receive the correct certificate from both appliances and that no certificate errors are presented.

There are a couple of ways to configure VDAs so that they can register with Delivery Controllers in your Citrix Site. Registration from a VDA perspective is a sensitive process, and one you want to get right from the beginning. Also, it is good to know some of the things which can cause registration to fail at any point in time. If VDAs are not registered against a Delivery Controller, they won’t be considered by a Delivery Controller when brokering connections.

There are multiple ways to provide the list of DDCs to a VDA. This step allows the VDA to become aware of which DDCs it must attempt registration against:

1. Through Group Policy.
2. Specifying the FQDN of Controllers manually during installation of the VDA.
3. Letting Machine Creation Services automatically configure Delivery Controller addresses on the VDAs it provisions.
4. Active Directory OU based (legacy option).

Citrix recommend that we use Group Policy to configure the Controller addresses, as this allows the most flexible way to manage the list of DDCs at any time.

When a VDA powers on initially for the first time, it somehow has to determine which Delivery Controller(s) it should make a registration attempt against. If you are using the Group Policy method or you have manually specified controllers during VDA installation, this forms what we call the ListOfDDCs. The DNS names from the initial discovery process are kept in the ListofDDCs, which is a registry string on each VDA. Moving forward, in order to keep the cache up-to-date, a Citrix Studio policy named Enable auto update of Controllers is enabled by default to keep the list of DDCs fresh. The information from auto-update is kept on a persistent cache within each VDA and the VDA uses that cache for future registrations. If a Delivery Controller is added or removed from the Site, auto-update keeps the cache updated.

The registration process itself uses Kerberos, and it is two-way, so the connection from the VDA also ends up routing in the opposite direction. Given that Kerberos is used in the registration process, load balanced addresses front-ending Controllers which sit behind a NetSclaer cannot be used. Time is also important as by default Kerberos cannot handle anymore than 5 minutes of time skew.

To get a feel for each method of configuring Delivery Controller addresses on VDAs, I have explained each method below in brief detail.

Contents:

• Group Policy
• Manually during VDA installation
• Machine Creation Services
• Active Directory OU based (legacy)
• Troubleshooting Registration

Group Policy:

When you are installing the VDA, on the Delivery Controller section choose Do it later (Advanced).

You then use Group Policy to initially configure the ListOfDDCs registry string and auto-update (enabled by default) keeps the cache up-to-date.

If you do not wish to use auto-update and disable it via policy, you’ll have to modify Group Policy if a Controller is added or removed from your Citrix Site before VDAs will become aware of it.

Open Group Policy and the Citrix Policies extension. Create a new Citrix Computer Policy.

Search for the Controllers setting and click Add. Note that as mentioned Enable auto update of Controllers is enabled by default.

Specify one or more FQDNs for each Delivery Controller in your Citrix Site and click OK.

After the VDA picks up the new policy, the ListOfDDCs string will be populated with the values you specified during policy creation. This string exists under HKLM\SOFTWARE\Citrix\VirtualDesktopAgent for 64-bit systems.

This forms the foundations for a VDA to initially register with a Delivery Controller, and then auto-update generates a cache in a persistent location which holds the most up-to-date Controller list going forward.

Manually during VDA installation:

When you are installing the VDA, on the Delivery Controller section choose Do it manually.

Enter one or more Delivery Controller addresses and complete the VDA installation. Again, these values form the ListOfDDCs and auto-update keeps the list of Controllers up-to-date in a persistent location.

To find the persistent location, on a VDA launch PowerShell and run command Get-CimInstance -Namespace “Root\Citrix\DesktopInformation” -Class “Citrix_VirtualDesktopInfo” | select PersistentDataLocation

The persistent data location is only accessible from the SYSTEM account. For this, we can use PsExec. Launch PsExec as SYSTEM and browse to %ProgramData%\Citrix\PvsAgent\LocallyPersistedData\BrokerAgentInfo and open the XML file SavedListOfDdcsSids.xml.

To confirm, auto-update has updated the cache with a second Controller not specified during VDA install, ddc02.jgspiers.com

Machine Creation Services:

When you are installing the VDA, on the Delivery Controller section choose Let Machine Creation Services do it automatically.

Once machines have been provisioned by MCS, there will be a Personality.ini file on the root of C:\ on each VDA.

It is in this file that the Delivery Controller list is kept.

Active Directory OU based (legacy):

I’ll not touch on this method too much. Basically, Citrix don’t recommend you use it anymore. The recommended approach is to use a mixture of Group Policy for initial configuration and auto-update to keep the list updated.

Troubleshooting Registration:

• By default, VDA registration occurs over port 80. If you have not changed this default port, then verify that no process on your VDA machine is listening on port 80 other than SYSTEM. You can use netstat -aon -p tcp to confirm.
• Make sure the VDA and Delivery Controller times are in sync. Since registration uses Kerberos, time is important.
• If you are running in a secure environment that makes use of the Access this computer from the network policy, make sure that VDAs are able to communicate with Delivery Controllers and vice-versa using this policy setting.
• Make sure you are not trying to point VDAs to a load balanced address for the DDCs, this will not work.
• Make sure no typos exist in the DDC names when specified via Group Policy for example.

A list containing the majority of Citrix related Skype for Business support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Skype for Business:

A list containing the majority of Citrix StoreFront & Receiver for Web support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

StoreFront & Receiver for Web:

A list containing the majority of Citrix related System Center Configuration Manager support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

System Center Configuration Manager:

A list containing the majority of Citrix related Thin Client support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Thin Clients:

A list containing the majority of Citrix Universal Print Driver, Universal Pring Server and general printing support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Citrix Fixes – Universal Print Driver & Server, General Printing:

A list containing the majority of Citrix related VMware ESX support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

VMware ESX:

A list containing the majority of Citrix related Windows 10 support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Windows 10:

A list containing the majority of Citrix related Windows Server 2016 support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Windows Server 2016:

A list containing the majority of Citrix Workspace Environment Management support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Workspace Environment Management:

A list containing the majority of Citrix XenApp & XenDesktop (excluding Machine Creation Services) support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

XenApp & XenDesktop (excluding Machine Creation Services)

A list containing the majority of Citrix XenMobile support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

XenMobile

A list containing the majority of Citrix XenServer support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

XenServer

A list containing the majority of Citrix related System Center Configuration Manager support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

System Center Configuration Manager:

A list containing the majority of Citrix related Thin Client support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.

The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.

There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.

Thin Clients: