A list containing the majority of Citrix Endpoint Management (formerly XenMobile) support articles collated to make this page a one stop place for you to search for and find information regarding any issues you have with the product and its related dependencies.
The page is updated daily with new support articles and information. Articles will change from time and if information here is outdated or incorrect please let me know using the comments. Links may also expire or change so if you find broken links, please again let me know. For each issue, known product versions affected are recorded however that does not mean product versions that aren’t listed are not affected.
There is a search box that you can use if looking for a specific fault. For example if you have an error code or error message, use that to perform a search. You can also use your browsers search feature which will perform a search against the whole page based on the words you enter.
XenMobile / Citrix Endpoint Management:
| wdt_ID | Brief Description of Issue | Brief Description of Fix | Applicable Product Versions Affected (if known) | Link to supplemental Support Article(s) |
|---|---|---|---|---|
| 1 | When opening PDF links through Secure Web Adobe does not appear as an "Open-in" option. | The PDF is actually embedded in HTML, which is why Adobe is not given as an option. | https://support.citrix.com/article/CTX227373 | |
| 2 | If a users device is deleted from XenMobile Server, you are unable to enroll the iOS/Android device again. | Perform a migration from XDM 9 to XMS 10.x using the latest XenMobile migration tool. | https://support.citrix.com/article/CTX227359 | |
| 3 | When users try to enrol or download apps they receive error "Cannot complete request" in Secure Hub. | Upgrade to XenMobile Server 10.5 Rolling Patch 2. | https://support.citrix.com/article/CTX227312 | |
| 4 | Emails are received in Secure Mail on Android 7 but notifications do not show on the screen. | In Secure Mail check the "Check frequency" setting. The preferred value is "Auto". Next check notifications are switched on for Secure Mail by navigating to "Settings -> Notifications". Also check to make sure power saving mode is not switched on, which may prevent notifications from showing. This behaviour in power saving mode can be modified to show notifications for Secure Mail. | https://support.citrix.com/article/CTX227296 | |
| 5 | Policies and applications do not push to iOS devices from XenMobile 10.5 configured with a proxy server. | APNS traffic does not work with Auth and can be configured without authentication as HTTP or SOCKS. | https://support.citrix.com/article/CTX227187 | |
| 6 | You cannot bind secure LDAP on XenMobile. | If you have more than one Domain Controller, install each certificate on XenMobile Server. Also enter the Domain Controller's FQDN in the primary and secondary server fields in LDAP configuration on XMS. | Citrix XenMobile 10.6. | https://support.citrix.com/article/CTX227209 |
| 7 | Windows phone partially enrols on XenMobile. The device is listed as managed on the XenMobile console but all the properties for the device are not listed. | Make sure the XenMobile Server certificate has not expired. If it has, renew it. | https://support.citrix.com/article/CTX210483 | |
| 8 | Secure Mail prompts for a pin such as when the application sleeps or wakes. | This is due to iOS intervention. As iOS puts applications such as Secure Mail to sleep such as when the battery is low. This can also cause notifications to not be delivered until the user brings Secure Mail to the foreground by explicitly opening it. | https://support.citrix.com/article/CTX224215 | |
| 9 | "Incorrect credentials" error received when trying to enrol a device even though the credentials are correct. | Test on other users to see if this is specific to certain accounts. On the affected accounts, within Active Directory, check the samAccountName/UPN is correct. | https://support.citrix.com/article/CTX214077 | |
| 10 | Un-enrolled devices still show as managed. | This is expected behaviour. When a device is un-enrolled client side, the device will remain as managed on XenMobile Server due to the device no longer communicating with XMS. This is not a concern because the secured data that was on the device will no longer be accessible. In a future release, there may be a change to XenMobile that prevent un-enrolling until the device has connectivity to XMS. | https://support.citrix.com/article/CTX227005 | |
| 11 | From an iOS device, you cannot upload a file to an internal webpage using Secure Web. The same does not occur on Android devices. | A fix will be included in a future release. There is a workaround mentioned in the CTX article. | https://support.citrix.com/article/CTX226990 | |
| 12 | After enrollment to XenMobile, users cannot access the app store (MAM) if 4K certificates are used on the backend server Load Balanced by NetScaler. Via WireShark you see an "Unsupported certificate" error after the Client and Server Hello. | To avoid this issue RSA certificate keys less than 4096K in size when Load Balancing MAM via NetScaler. | https://support.citrix.com/article/CTX136134 | |
| 13 | On a MAM only environment, users can enrol unlimited devices even though an Enrollment Profile has been set to limit the amount of devices per user. | If the custom server property "number.of.mam.devices.per.user" exists, it is used as a MAM Device Register limit and if the value is 0, there is no limitation. Change the value to a number of your choice and reboot XMS. | https://support.citrix.com/article/CTX223801 | |
| 14 | Unable to block URLs in Secure Web for Android. Websites are still accessible even though they are set to be blocked. | Double-check the URLs to make sure they are in the correct format. | ||
| 15 | After disabling TLS 1.0 ciphers on XenMobile, Android devices can no longer enrol. | Make sure the client and NetScaler are sending at least one matching cipher suite. WireShark can help confirm which ciphers the device is sending during Client Hello and which ciphers NetScaler is responding with. | https://support.citrix.com/article/CTX225267 | |
| 16 | On a Samsung Android device you receive error "Refresh request failed". | Under XenMobile Server properties, set the value of "xms.server.mode" to "MDM" instead of "ENT". | https://support.citrix.com/article/CTX225779 | |
| 17 | SSO to ShareFile MDX application is failing. | Make sure on the XenMobile Server that the ShareFile settings are correct and use the "Test Connection" button to make sure a connection can be established successfully. | https://support.citrix.com/article/CTX225671 | |
| 18 | Mail sync fails on Secure Mail for Android and iOS devices. The NetSaler "ns.log" shows error "STA ticket length from the ICA file exceeds the maximum length for STA tickets". | Upgrade to NetScaler 12.0.51.24. | Citrix NetScaler 12.0.41.16. | https://support.citrix.com/article/CTX223765 |
| 19 | Replying to an email which is attached to another email results in the reply getting stuck in outbox on Secure Mail. | This will be resolved in Secure Mail 10.7.0. | https://support.citrix.com/article/CTX226899 | |
| 20 | After upgrading XenMobile Server to 10.5, users cannot connect to the XenApp/XenDesktop store. | Contact Citrix Support. | https://support.citrix.com/article/CTX222316 | |
| 21 | Device locks commands sent from XenMobile Server do not take effect on certain Android 7 devices. | This is a current Android 7 and onwards limitation. Citrix use a "resetPassword" API which Google have removed access to. Phones that do not have a lock will work as normal, phones that do have no workaround at present. | https://support.citrix.com/article/CTX227497 | |
| 22 | Secure Mail throws an error "Access to your company is not currently available". | Removing the "Background network services" and "Background network service gateway" under App Settings solved this issue. | https://support.citrix.com/article/CTX219133 | |
| 23 | When sharing a link from the ShareFile 10.6 mobile app, you receive options to either use "Secure Mail" or "Native Mail". Upon selecting Native Mail the ShareFile app redirects you to "Secure Mail". | Change the MDX policy Mail Redirection setting to "Native Mail". | https://support.citrix.com/article/CTX227378 | |
| 24 | When opening an attachment from Secure Mail on iOS 11, you are given a list of unmanaged applications that can be used to open the attachment. | This appears to be a change at the OS level. If the MDX policy "Document exchange (open in)" is set as restricted then the document will not be able to open in unwrapped applications, even though they show as options, you will receive error "Restricted by admin policy 'Open in' is blocked for this app". | https://support.citrix.com/article/CTX227536 | |
| 25 | When browsing to a web page through Secure Web on iOS you receive an "Http/1.1 Service Unavailable" error. | The redirect URL was missing a forward slash at the beginning, causing Secure Web to add an additional base URL which resulted in a 503 error. Create a "Rewrite" policy on NetScaler to append "\" at the beginning of the URL and bind it to the NetScaler Gateway Virtual Server as explained in the CTX article. | https://support.citrix.com/article/CTX227537 | |
| 26 | When installing applications through the Apple Store you are asked for the password every time. | Whilst you can turn off password prompts for free apps, you cannot turn off password prompts on paid for items. What you can do for paid items is prompt for passwords either always or after 15 minutes of purchasing an application. | https://support.citrix.com/article/CTX227573 | |
| 27 | You can not join WebEx bridge using the one click button in Secure Mail for Android or iOS. | Upgrade to Secure Mail for Android 10.7 which has support for 10 digit attendee access codes. Secure Mail previously only had support for 8 digit attendee access codes and as a workaround you had to launch the WebEx app and dial in to a call from there. | Android. | https://support.citrix.com/article/CTX227567 |
| 28 | Enrolled devices still show an old certificate after renewing certificates on both NetScaler and XenMobile Server. Newly enrolled devices do receive the updated certificate. | The SSL certificate is pushed once to the device during enrollment for the first time. Operations of the device are not affected, however to update the certificate on iOS 10.3.3+ versions navigate to "Settings -> General -> Profile & Device Management -> Update". | https://support.citrix.com/article/CTX227443 | |
| 29 | After changing your password in Secure Mail, you are prompted for the password again. Upon entering, you receive error "Unable to configure this account - Access to this server has been restricted by your Administrator". | Exchange 2007 was beng used. Upgrade to a supported version or move the affected mailboxes to a supported version of Exchange. | Microsoft Exchange 2007. | https://support.citrix.com/article/CTX227631 |
| 30 | Android devices are deleted from XenMobile Server automatically. After logging in to Secure Hub, users cannot connect to the store. | This is resolved in Secure Hub 10.7. | https://support.citrix.com/article/CTX227593 | |
| 31 | When enrolling an iOS device you receive error "Profile Installation Failed. The SCEP server configuration is not supported". | Check the enrollment profile is not set to restrict a certain number of enrolled devices per user. | https://support.citrix.com/article/CTX227633 | |
| 32 | When attempting to access the store with an iOS device you receive error "Cannot complete your request". | Apply rolling patch 2 to your XenMobile 10.6 deploymrent. | Citrix XenMobile 10.6. | https://support.citrix.com/article/CTX227630 |
| 33 | After enrolling, you cannot connect to Secure Mail. | Add the correct email domain value in the MDX policy. | https://support.citrix.com/article/CTX227655 | |
| 34 | Turning on the Personal Calendar option in Secure Hub does not overlay the personal calendar with your work calendar. | This is caused by an iOS device restriction which prevents the personal calendar overlay feature from reading un-managed applications. You can lift this restriction by setting "Documents from unmanaged apps in managed apps" to "ON". | https://support.citrix.com/article/CTX227684 | |
| 35 | "403 - Forbidden: Access is denied" when authenticating to XenMobile Server or NetScaler Gateway. | Using IIS on your Certificate Services server, set "SSL Settings" to "Accept". This allows SSL certificates to be accepted during authentication. | https://support.citrix.com/article/CTX227693 | |
| 36 | When Split Tunnel on NetScaler turned "ON", accessing internal links fail from Secure Web. | Make sure you have created Intranet Applications on NetScaler to allow NetScaler to determine when not to send traffic externally. | https://support.citrix.com/article/CTX204300 | |
| 37 | When accessing Secure Hub from an Android device, the app sticks at "Please wait...". | This is a known issue, expected to be fixed in release 10.7.5. | https://support.citrix.com/article/CTX227861 | |
| 38 | Secure Mail is unable to send large attachments. | Check Exchange for any restrictions on how large attachments can be. | https://support.citrix.com/article/CTX212687 | |
| 39 | The IMEI/MEID is not visible for devices in MAM only mode. | The ability to see a devices IMEI/MEID is only possible in Enterprise and MDM mode. | https://support.citrix.com/article/CTX217919 | |
| 40 | Local and LDAP accounts cannot log on to the XenMobile admin console. | Check the SQL server for space issues. In this case, the transaction log hosting disk for the XenMobile database was full. | https://support.citrix.com/article/CTX217429 | |
| 41 | Secure Mail on iOS does not show email notifications when emails are in subfolders. | This is expected behaviour. Only emails arriving into the Inbox folder will receive notification alerts. There is an enhancement request for notifications to cover emails going to subfolders. | https://support.citrix.com/article/CTX213255 | |
| 42 | MAM enrollment works fine but MDM does not and produces error "Profile installation failed: profile failed to install" on iOS and "Access to your company network is not available" on Android. | On NetScaler, make sure under the XenMobile vServer "Client Authentication" is enabled and "Client Certificate" is set to "Mandatory". | https://support.citrix.com/article/CTX219083 | |
| 43 | Draft emails created in Secure Mail are not synced to Microsoft Exchange. | Syncing of the draft folder using ActiveSync is a new feature only available in Exchange Server 2016. Secure Mail however continues at this time to make use of ActiveSync 14 features and functionality. | Microsoft Exchange Server 2016. | https://support.citrix.com/article/CTX220610 |
| 44 | Authentication from Secure Mail to Exchange Online (Office 365) may fail if the password contains umlaut or similar characters. | Upgrade to Secure Mail 10.7.5 and newer. | https://support.citrix.com/article/CTX227883 | |
| 45 | When launching Secure Web on iOS you receive error "Your connection has timed out. Please reconnect to Secure Hub to access work resources". | On NetScaler, set the plug-in type under your Session Profile to "Windows/Mac OS X". | https://support.citrix.com/article/CTX227917 | |
| 46 | When uploading some enterprise applications to MDM you receive error “error extracting mobile app data”. | Upgrade to XenMobile Server 10.5 RP1. | https://support.citrix.com/article/CTX227974 | |
| 47 | iOS 11 devices face issues with enrollment. | This could be due to TLS 1.2 not being enabled on XenMobile which is needed for iOS 11, or SHA-1 certificates being used on XenMobile which is no longer supported through Secure Hub on iOS 11. | iOS 11. | https://support.citrix.com/article/CTX228080 |
| 48 | XenMobile is unable to enumerate the group membership of users. This can result in no MAM resources being deployed if not bound to the "All Users" Delivery Group. | Make sure the "Pre-Windows 2000 Compatible Access" LDAP group contains appropriate membership settings such as "Authenticated Users" being a member. | Citrix XenMobile 10.5 and 10.6. | https://support.citrix.com/article/CTX228089 |
| 49 | When importing a renewed SSL listener certificate on XenMobile 10.6 you receive error "Could not import the certificate". | This is a known issue. Ignore the error and restart XMS. This is resolved in 10.7 RP2. | Citrix XenMobile 10.6. | https://support.citrix.com/article/CTX228090 |
| 50 | Applications removed from a Delivery Group are not removed from managed devices. | Create an app uninstall policy which lets you remove apps from the device. The apps are removed when the policy is deployed to the device. | https://support.citrix.com/article/CTX228087 | |
| 51 | Upgrading to XenMobile Server 10.6 or later fails. | Make sure the database user used in XMS to connect to the database has "sysadmin" privileges as during an upgrade some of the tables are modified. | https://support.citrix.com/article/CTX228117 | |
| 52 | Allocating more RAM to the XMS results in XMS booting into recovery mode. | Make sure the XMS database user has "sysadmin" permissions so that it can change resource values in the database and prevent XMS from booting into recovery mode. | https://support.citrix.com/article/CTX228142 | |
| 53 | You are unable to launch HDX applications via the XM Store and the XMS Server logs show error "Exception while getting HDX Apps ..Enumerate URL is not exists". | Check and make sure the StoreFront FQDN in XMS is correct. | https://support.citrix.com/article/CTX228159 | |
| 54 | XMS tries to restart in Recovery Mode a number of times when rebooting, before successfully connecting to the database. | Modify the "c3p0" values to suit your environment. | https://support.citrix.com/article/CTX228171 | |
| 55 | When attempting to enroll a certain user, Secure Hub throws error "Connection failed. There was an error connecting to the server. Please try again or contact your help desk". | Using the steps from the CTX article, remove the affected user and any associated device from the XMS database and then try again. | https://support.citrix.com/article/CTX228320 | |
| 56 | When composing a new email, forwarding or replying, as you type using the keyboard you notice a 20-45 second delay for the characters to appear within the email. | This will be fixed in the next release of Secure Mail. In the meantime, navigate to "Settings -> General -> Keyboard" and turn off "Shortcuts". | Citrix XenMobile Secure Mail 10.7 and iPad. | https://support.citrix.com/article/CTX228260 |
| 57 | Users that reside in the Netherlands cannot access the applications which are blocked in Germany. | Either contact the application vendors to obtain an IPA file which can then be pushed from XenMobile Server, or change the XMS secondary DNS to that of local LDAP servers from the Netherlands. | https://support.citrix.com/article/CTX228437 | |
| 58 | Silent notifications are not delivered to Secure Mail running on iOS 11. This impacts Secure Mails ability to sycn new data from the server in order to show notifications on the lock screen. | There is an Apple bug currently tracking this issue. | iOS 11. | https://support.citrix.com/article/CTX228574 |
| 59 | After configuring StoreFront and NetScaler with SSL Offload, when running connectivity tests to XenMobile Server you receive error "Connection Failed" and trace files show an "Unknown Certificate" error. | Check the time difference between XMS and NetScaler. | https://support.citrix.com/article/CTX228675 | |
| 60 | When wrapping a .apk application you receive error "No icon is specified in the app manifest file" within the MDX toolkit logs. | Follow the steps in the CTX article to decompile the application, copy the icon in and compile then wrap it again. | https://support.citrix.com/article/CTX228854 | |
| 61 | WorxHome is missing from the App Store. | From XMS 10.4 onwards, WorxHome has been replaced by Secure Hub. | Citrix XenMobile Server 10.4. | https://support.citrix.com/article/CTX228864 |
| 62 | HDX applications fail to launch with error message "Engine was not loaded. There is no Citrix SSL Server configured on the specified address. Error Number 183". | The second NetScaler Gateway Virtual Server is running on custom port "8081" which was blocked by a firewall. | https://support.citrix.com/article/CTX228869 | |
| 63 | When using Secure Mail, if you click on a link that contains downloads, the link opens in Secure Web. However Secure Web cannot download those files. | This will be resolved in Secure Web 10.8.0. | Citrix Secure Web for Android. | https://support.citrix.com/article/CTX228998 |
| 64 | When using the Sound Clip Tool in iAnnotate, you may find the tool bar does not function as intended. Upon attempts to save any new audio stream, the app may exit. | Download and use MDX Toolkit/SDK v10.7.5.10 which addresses incompatibilities with audio functions when iAnnotate is wrapped. | iOS and iAnnotate. | https://support.citrix.com/article/CTX229049 |
| 65 | Secure Web does not load images on iOS with the pop-up blocker disabled. When pop-up blocker is enabled, images display. | This is a known issue. Upgrade to Secure Web 10.6. | Citrix Secure Web 10.4.5. | https://support.citrix.com/article/CTX229120 |
| 66 | When downloading changes made from "configure.samsungknox.com" you receive error "Your organization does not allow this action". | Check to make sure Secure Web is not blocking access to Intent, as explained in the CTX article. | Samsung Knox and Citrix Secure Web. | https://support.citrix.com/article/CTX229122 |
| 67 | You fail to enroll any device when using certificate based authentication and XenMobile Server logs show "Could not sign CSR". | The certificate used by XenMobile Server to issue new certificates has expired and needed replaced. | https://support.citrix.com/article/CTX229215 | |
| 68 | MAM enrollment fails with a "Request Failed" error message. In the Secure Hub logs you see "The gateway is out of licenses". | Make sure you have enough Universal Licenses allocated to the MAM NetScaler Gateway Virtual Server. | https://support.citrix.com/article/CTX224635 | |
| 69 | When launching XenMobile apps on Google Pixel 2 ansd 2 XL devices you receive error "This device doesn't support encryption features required by the application". | Google Pixel 2 devices will be supported in XenMobile 10.7.15 and above. As a current workaround, you could disable encryption in MDX policies. | https://support.citrix.com/article/CTX229358 | |
| 70 | When using REST API you receive an "Unauthorized access Status 1008" error. | This may happen if the account you are authenticating with is not a local account on XenMobile. Use a local account. | Citrix XenMobile 10.7. | https://support.citrix.com/article/CTX229397 |
| 71 | When using client certificate based authentication to Secure Mail you receive error "certificate might be invalid or inaccessible". | This issue looks to have been caused by changes to Google Play Services and is resolved in Google Play Services 11.7.45. | https://support.citrix.com/article/CTX229592 | |
| 72 | When trying to send anything from a photo/video/contact you are no longer presented with the option to send via message. | This is currently a fault with iOS 11 and Apple are investigating. | Apple iOS 11. | https://support.citrix.com/article/CTX229569 |
| 73 | After wrapping an Android applicaion with MDX Toolkit version 10.7.5, the "manifest.xml" file shows the version as 10.6.20. | The MDX toolkit version is updated but the SDK version is still 10.6.20 on Android, which is why you see this version. | https://support.citrix.com/article/CTX229647 | |
| 74 | After rebuilding one of the cluster nodes and joining back to cluster, you can not log on to the XenMobile Server Web Console. | Reboot the new node to force a connection back to the XM database. | https://support.citrix.com/article/CTX229672 | |
| 75 | When adding Google Play Store apps you receive error "A configuration error occurred. Please try again". | Add any required certificates on XenMobile server that is required to trust the network component or firewall in your environment. | https://support.citrix.com/article/CTX229738 | |
| 76 | When choosing "Sync with local contacts" multiple entries for the same contact are created on enrolled devices. | This issue is resolved in Secure Mail 10.7.10. | Citrix SecureMail 10.7.5. | https://support.citrix.com/article/CTX229786 |
| 77 | XenMobile Service on Citrix Cloud fails to connect to on-premises PKI/StoreFront servers with error "Connection Failed". | This happens when the proxy does not honour wildcard certificates when they are specified in the bypass list. Follow the CTX article for workaround steps. | https://support.citrix.com/article/CTX229792 | |
| 78 | When installing XenMobile Server 10.6 or 10.7 on ESXi you may encounter an installation error and ESXi logs may contain "Value 'VirtualSCSI' of element ResourceSubType not found" or "Value '3' of element Parent is no Reference of type DiskControllerReference". | This can be caused by ESXi not automatically changing the virtual disk adapter to "lsilogicsas" and instead keeping the adapter set as "VirtualSCSI". Follow the steps provided in the CTX article to edit the hardware configuration file. | https://support.citrix.com/article/CTX229901 | |
| 79 | The date for "Created" and "Last Authenticated" fields are 100 years out in XenMobile console under "Manage -> Users". | Clear your browser cache and launch the XenMobile console again. | https://support.citrix.com/article/CTX229917 | |
| 80 | Whenever MDX policy "Browser user interface" is set to "Hide All Controls" for Secure Web, it would crash after launch. | This issue will be resolved in Secure Web 10.7.20. | Citrix Secure Web. | https://support.citrix.com/article/CTX229955 |
| 81 | You cannot change the XenMobile Secure Mail calendar notification sound and receive error "Your organization does not allow this action". | Add lines to the "Restricted open-in exception list" as described in the CTX article. | Citrix Secure Mail. | https://support.citrix.com/article/CTX229959 |
| 82 | When configuring the GPKI deployment in XenMobile server you may receive error "Error: Could not sign CSR" from the XenMobile server Debug log file. | This is resolved in XenMobile Server 10.7 Rolling Patch 1. | Citrix XenMobile Server 10.5, 10.6 and 10.7. | https://support.citrix.com/article/CTX230031 |
| 83 | When searching for an update to a public store application on Andorid, you receive error "500 Server Internal Error". | Make sure your Google Play credentials are correct. | https://support.citrix.com/article/CTX230128 | |
| 84 | After an on-premises Exchange mailbox migration to Office 365, your Android Secure Mail application can no longer connect to the mailbox account in the new location. | Upgrade to Secure Mail 10.7.15 which resolves this issue. This version is able to redirect to Office 365 without issue. | https://support.citrix.com/article/CTX230139 | |
| 85 | You cannot add an "Auth domain" under "IDP Configuration" when trying to integrate XenMobile Service with the Citrix Identity Platform. | You must configure the Identity and Access Management Service with Azure Active Directory before attempting to configure the XenMobile Service. | Citrix XenMobile Service. | https://support.citrix.com/article/CTX230305 |
| 86 | The "Terms and Conditions" policy fails to apply on Windows 10 desktops and tablets that have "Autodiscovery Enrollment" enabled. | This is a known issue with the Windows Autodiscovery service with XenMobile. The CTX article explains why and what to do. | https://support.citrix.com/article/CTX230660 | |
| 87 | An Asus device throws error "the device does not support the encryption features requires to run this application". | Asus devices use Intel based processors which are not supported by XenMobile. | https://support.citrix.com/article/CTX230586 | |
| 88 | The ELM key does not get deployed to Samsung SAFE devices after a migration from XenMobile 9 to 10.7. | Delete the server property "elm.license.key". | Citrix XenMobile 10.7. | https://support.citrix.com/article/CTX230695 |
| 89 | Secure Hub will not upgrade if "Network Extension (VPN)" is on after an upgrade to iOS 11. This does not impact MDM only customers. | Users need to be on iOS 11.1 at a minimum or else update to the latest version of iOS 11 before updating Secure Hub. | Apple iOS 11. | https://support.citrix.com/article/CTX227769 |
| 90 | You are not able to send emails from Secure Mail that have attachments larger than 8MB. | Change the limit on Exchange Server. | https://support.citrix.com/article/CTX230769 | |
| 91 | MAM enrolment fails from iOS devices. MDM enrolment is successful. It is found that when entering UPN credentials to the NetScaler Gateway Virtual Server, the NetScaler sends the credentials in sAMAccountName format resulting in a "401 Unauthorised" reply from the backend server. | Remove parameters "ntDomain" and "ssoDomain" from the XenMobile Session Policy. | https://support.citrix.com/article/CTX230793 | |
| 92 | In Secure Web, and on a website which requires a username and password, Android devices work fine but on iOS devices after submitting credentials the website complains of receiving no username. | This is a known issue in Secure Web and will be fixed in version 10.8 | Citrix Secure Web 10.7. | https://support.citrix.com/article/CTX230830 |
| 93 | You cannot preview a WhatApp image through Secure Mail on Android. | Change the value of the "Public File Encryption" and "Private File Encryption" to "Disabled". | https://support.citrix.com/article/CTX230912 | |
| 94 | The "Installed Apps" dashboard shows incorrect information on what applications devices have. | You have to push the "App Inventory Policy" to devices in order to get updates to show this information. The deployment condition should also be set to "On every Connection" in order to receive continuous updated information from devices. | https://support.citrix.com/article/CTX231447 | |
| 95 | When updating an application from XenMobile Server that has a new update, you receive error "The app is up to date to the latest version". This happens when the application has three digits in the version name such as "7.2.3". | Upgrade to XenMobile Server 10.7 Rolling Patch 2. This will fix most issues with versioning but there are still issues with some versions. A fix for affected versions after upgrading to 10.7 Rolling Patch 2 will be released in an upcoming version. | https://support.citrix.com/article/CTX231571 | |
| 96 | After building a new XenMobile node to add to a cluster, you cannot access the console address for administration. | Rebuild the server and specify the correct PKI password, which matches the original node. | https://support.citrix.com/article/CTX231592 | |
| 97 | You cannot save LDAP configuration and receive error "Bad Request". | In this case there was a connectivity issue between the XenMobile Server and domain FQDN. | https://support.citrix.com/article/CTX231609 | |
| 98 | While searching within the XenMobile console you see error "Unexpected error occurred when reading data". | Check that the user being searched for has not got duplicate invitations for enrollment and that there are not duplicate entries for the device. | https://support.citrix.com/article/CTX231617 | |
| 99 | MDX application does not prompt for Secure Pin on application launch. | This is caused when encryption is turned off. After turning it on within the XenMobile console, prompts appear. | https://support.citrix.com/article/CTX231773 | |
| 100 | After a NetScaler reboot, existing Secure Hub users cannot connect and get error "Secure Hub could not connect". | Since all active user sessions on NetScaler are cleared during a reboot, High Availability should be considered which will help failover sessions during an appliance reboot. | https://support.citrix.com/article/CTX231793 | |
| 101 | When using Secure Web and traffic is redirected through NetScaler you receive error "403 Forbidden Access". When traffic is not redirected through NetScaler access to the websites work. | Upgrade to NetScaler 12.0. There is a limitation in NetScaler 11.x that prevents users from accessing websites that require SNI. You can use OpenSSL on NetScaler to verify that a handshake failure occurs on an affected appliance using a command such as "openssl.exe s_client -connect sniwebsite.com:443". | https://support.citrix.com/article/CTX231815 | |
| 102 | Files opened from ShareFile in QuickEdit using the "Open In" menu do not open correctly and are declared as corrupt. | Update to the latest ShareFile 6.6+ and QuickEdit 10.7.15+ app versions and MDX Wrapper versions. This overcomes incompatibilities within the MDX Wrappers for ShareFile and QuickEdit apps. | Citrix XenMobile and Citrix ShareFile. | https://support.citrix.com/article/CTX232160 |
| 103 | If Secure Hub on iOS needs to authorise Secure Web, and while launching a Web Link inside of Secure Web, the application crashes. | Upgrade to Secure Web 10.7.25. | Citrix Secure Web 10.7.20 for iOS. | https://support.citrix.com/article/CTX232182 |
| 104 | While exporting device reports from the "Manage -> Devices" tab, a few of the columns are misaligned in the produced CSV file. | Upgrade to XenMobile 10.7 Rolling Patch 2. | Citrix XenMobile 10.7. | https://support.citrix.com/article/CTX232238 |
| 105 | Occasionally, end users may receive a pop-up message in Secure Mail reading "Calendar search unavailable. This feature is currently undergoing maintenance" after an upgrade to Secure Mail 10.7.30.. | Citrix are currently investigating this issue. | Citrix Secure Mail 10.7.30. | https://support.citrix.com/article/CTX232575 |
| 106 | Pre-loaded bookmarks are not added to Secure Web after you make changed to Secure Web policies. | Close Secure Web and within Secure Hub tap on WorxStore. Afterwards navigate back to Secure Hub and open Secure Web. Also, make sure when adding a pre-loaded bookmark that you type in the string manually rather than copying and pasting, which can lead to formatting issues. | https://support.citrix.com/article/CTX232608 | |
| 107 | When wrapping iPas only applications with MDX toolkit 10.7.20v, you receive error "Failed to generate this file: manifest.xml". | A fix for this issue will be available in version 10.8.10 of the MDX toolkit. | Citrix MDX toolkit 10.7.20. | https://support.citrix.com/article/CTX232626 |
| 108 | When clicking on the "View conversation" button in a Yammer notification via Secure Mail there is a different behaviour when Yammer is installed versus not installed. When it is installed, a small pop-up window informs you to install Secure Web. When not installed, you are prompted to download Yammer for Android. | To make the "View conversation" button take you to Yammer, add {action=android.intent.action.VIEW package=com.yammer.v1} to the "Open-In" exception list in SecureMail. | https://support.citrix.com/article/CTX232637 | |
| 109 | You cannot open a conversation in the Telegram application after disabling the camera via a Device Restriction policy. This issue only affects Samsung devices with version 5.x or 6.x of Android. | This issue is not XenMobile related, but on a Samsung device the application requires access to the camera to launch a conversation. | Samsung and Android 5.x or 6.x. | https://support.citrix.com/article/CTX232747 |
| 110 | When iOS users browse to a web page that requires Client Certificate authentication through Secure Web and they have no access to that page, instead of receiving a HTTP 403 unauthorized reply they receive message "The server requires a client certificate". WireShark traces show the web server returning a "403 Forbidden" to the client. Android correctly displays this page. | This issue only occurs under specific circumstances as documented in the CTX article. There are a few workarounds available and the issue is known by Apple. | Apple iOS. | https://support.citrix.com/article/CTX232822 |
| 111 | A renewed WiFi certificate does not get automatically pushed to iOS devices. | Verify if the Deployment Schedule for WiFi policy is set to "Only when previous deployment has failed" and if so, change it to "On every connection". | https://support.citrix.com/article/CTX232847 | |
| 112 | An issue with a "ps utility" causes the XenMobile Server nodes to reboot. | Upgrade to XenMobile 10.8. | https://support.citrix.com/article/CTX232945 | |
| 113 | When the "Samsung Storage Encryption Policy" is applied the Secure Startup Screen is loaded. | Secure Startup is now responsible for device encryption on Samsung devices. This is why when the Storage Encryption policy is applied, the user is requested to enable Secure Startup on the device. | https://support.citrix.com/article/CTX232918 | |
| 114 | When you enable iPad applications on XenMobile, it created a new application ID in the database with the "VPP_ACCOUNT_ID" set to "Null". | Back up the XenMobile database, then run a query on the database as explained in the CTX article. | https://support.citrix.com/article/CTX233029 | |
| 115 | When certificate based authentication is used during enrollment you receive error "Could not connect to the server". | Verify the user certificate from the XenMobile database to make sure it is not an old one. | https://support.citrix.com/article/CTX233028 | |
| 116 | Secure Apps may occasionally slow down or crash when wrapped with MDX and the Log Level is set to the highest (Level 15). | A fix for this issue will be released in the upcoming MDX releases. As a recommendation and best practice from Citrix, you should set the Log Level to Level 4 in for production apps unless working with Technical Support and requested by them to raise the Log Level. | https://support.citrix.com/article/CTX233092 | |
| 117 | Web Links do not get pushed to devices. | If you are running MDM only, you need to create the Web Links as a Web Clip. | https://support.citrix.com/article/CTX233106 | |
| 118 | After an upgrade to Exchange 2016 CU8, users either cannot log on or cannot sync email. In the logs you see "ERROR (2) Authentication failed" and "Incorrect user name and password". | In this case the upgrade disabled the Client Certificate Mapping setting on Exchange. If certificate based authentication is being used then this must be re-enabled. | https://support.citrix.com/article/CTX233105 | |
| 119 | You are unable to resolve two internal URLs with SecureWeb and receive error "ERR::NET_EMPTY_RESPONSE". | Both internal URLs were added to an exclusion list which in a Reverse Split Tunnel configuration that had been configured, sent traffic to the internet. | https://support.citrix.com/article/CTX233191 | |
| 120 | You are unable to search for a few public applications in XenMobile. | This issue appears due to a permission issue on the device OS. The Google Play Store will only show applications which are compatible with the device and those same applications will be accessible from XenMobile console. | https://support.citrix.com/article/CTX233178 | |
| 121 | Emails 30Mb and larger do not send despite Send/Receive settings being confgured to a value greater than 30Mb. | IIS has a "maxAllowedContentLength" limit set to "30000000" bytes. Increasing this on the front and backend exchange websites for ActiveSync resolves the issue. | https://support.citrix.com/article/CTX233205 | |
| 122 | When one user attempts to send an email they receive error "You cannot send the mail". | This issue was resolved by re-installing/upgrading SecureMail to 10.8.5 for that affected user. | https://support.citrix.com/article/CTX233237 | |
| 123 | You cannot wrap Android applications on a MAC machine and get error "Cannot find Android SDK". | Update "android_settings.txt" with the path to the Android SDK. | https://support.citrix.com/article/CTX233276 | |
| 124 | User cannot login to SecureHub. | In Active Directory two user accounts had the same UPN. | https://support.citrix.com/article/CTX233445 | |
| 125 | After changing Active Directory group names, XenMobile Server cannot see the users in the correct groups. | When group names have been changed, they have to be re-associated on the XenMobile Delivery Groups again. This is because XenMobile does not use Active Directory SIDs | https://support.citrix.com/article/CTX233454 | |
| 126 | You may get a "403" error when accessing a few websites through SecureWeb. This happens for websites which have SNI enabled. | Upgrade NetScaler to 12.0.53.13 and enable SNI. | https://support.citrix.com/article/CTX233500 | |
| 127 | Secure Mail identifies WebEx meeting URLs as a Skype for Business meeting. | Upgrade to Secure Mail 10.8.5 or later. | https://support.citrix.com/article/CTX233733 | |
| 128 | When entering credentials in to Secure Hub during enrollment, you are returned to the FTU screen. | After adding a DNS entry for the XenMobile server and changing the MAM virtual IP address from an external IP to internal, enrollment started to work. | https://support.citrix.com/article/CTX233782 | |
| 129 | When adding a public application to XenMobile Server, it fails to install through Secure Hub on the end-user's device. | Some applications are different depending on the geography of the iTunes store. For example, you might add an application to XenMobile server from the US store, but the device is in a different geography where the application is not available. Manually specifying the store for users should solve the problem. | https://support.citrix.com/article/CTX233774 | |
| 130 | Access to ShareFile from iOS and Android does not work. | Check the ShareFile MDX Network Access policies to make sure traffic from NetScaler is not blocked. | https://support.citrix.com/article/CTX233815 | |
| 131 | Users are required to sign-on to iTunes to download Secure Hub even though it is deployed via VPP. | "Require device enrollment" has to be enabled for Secure Hub to be automatically deployed. | https://support.citrix.com/article/CTX233790 | |
| 132 | When selecting a device under "Manager -> Devices" and clicking "Edit" you receive error "500 Server Internal Error". | Take a backup of the XenMobile server and database then run a SQL query as explained in the CTX article. | https://support.citrix.com/article/CTX233828 | |
| 133 | When trying to access an application you see error "App not authorized, the app needs to be authorized from Secure Hub". | Check the persistence method on NetScaler as the recommended method is "Source IP". If an administrator has made multiple changes to the one application on XenMobile Server, reboot the server. | https://support.citrix.com/article/CTX233935 | |
| 134 | HDX applications accessed via XenMobile do not prompt for a pin after inactivity. | This is expected behaviour. Launching HDX resources does not initiate any communication with Secure Hub and as such no pin prompt will appear for these applications. | https://support.citrix.com/article/CTX233937 | |
| 135 | When runnig the XenMobile Mail Manager Setup wizard you receive a message that is has "ended prematurely because of an error". | After enabling Windows installer logging, the logs showed that .NET was missing or not at the required version. | https://support.citrix.com/article/CTX234091 | |
| 136 | After upgrading to Secure Web for Android bookmarks/favourites that have not been pre-configured by XenMobile Server are removed from the application. | This has been resolved in Secure Web 10.8.11. | Citrix Secure Web 10.8.10. | https://support.citrix.com/article/CTX234204 |
| 137 | Android for work application restriction stays in a "pending" status on Citrix Cloud. | This is a known issue. | https://support.citrix.com/article/CTX234371 | |
| 138 | When deploying a XenMobile OVA you receive error "Kernel Panic - not syncing: VFS: Unable to mount root fs on unknown-block". | Change the SCSI controller type from "LSI Logic SAS" to "LSI Logic Parallel". | https://support.citrix.com/article/CTX234406 | |
| 139 | Users cannot copy and paste more than four recipients into the "To" or "CC" fields in Secure Mail for Android. | This is a known issue. Upgrade to Secure Mail for Android 10.8.10. | https://support.citrix.com/article/CTX234485 | |
| 140 | BitLocker device policy fails to deploy to Windows 10 laptops. | BitLocker device policies are only applicable to Windows 10 1703+ Enterprise edition. You cannot use the same on Windows 10 Pro. | https://support.citrix.com/article/CTX234533 | |
| 141 | When clicking on a link within Secure Mail, you may receive message "No Browser Installed. Please install Secure Web or another web browser to open this link" even though Safari is installed on your iOS device. | Follow the CTX article to see how the configuration on XenMobile Server should look like when Safari is the default web browser. | https://support.citrix.com/article/CTX234532 | |
| 142 | XenMobile server shows high disk utilisation up to 94%. | The XMS had a lot of large log files which needed reduced via log settings. | https://support.citrix.com/article/CTX234530 | |
| 143 | The time within fields such as "Last authenticated" and "created" are all 100 years out. | Clear your browser cache. | https://support.citrix.com/article/CTX234745 | |
| 144 | When creating a support bundle you receive error "Authentication Failure node". | This is a known issue. Apply XenMobile Server 10.7 Rolling Patch 2. | Citrix XenMobile Server 10.7.0.20. | https://support.citrix.com/article/CTX234838 |
| 145 | Secure Mail synchornisation stops working after some time. | In this case, the Nokia device was stopping Secure Mail sync to save power. Secure Mail has to be removed from the power saving blacklist. | https://support.citrix.com/article/CTX234843 | |
| 146 | You are unable to search devices by their device name. | The ability to search by device name was turned off on XenMobile 10.8 for performance improvement. On XenMobile Server, add server property "include.device.properties.during.search" and set the value to "true". Reboot the XenMobile Server. | Citrix XenMobile Server 10.8. | https://support.citrix.com/article/CTX235213 |
| 147 | On Samsung Note devices, connecting to Citrix VPN results in message "Cannot connect to 'gateway URL'. Check your internet connection and verify the settings for 'gateway URL'". | The issue was with this particular device model and the vendor was contacted to resolve. | https://support.citrix.com/article/CTX235426 | |
| 148 | MAM enrolment fails with error "Http/1.1 Internal Server Error 43531". | Uncheck "ICA Only" on the NetScaler Gateway Virtual Server, as the Virtual Server must be set to Smart Access mode. | https://support.citrix.com/article/CTX235425 | |
| 149 | When mail arrives, you see "You have new mail" notifications but no details about the email are shown. | This is resolved in Secure Mail 10.8.25. | https://support.citrix.com/article/CTX235474 | |
| 150 | When accessing intranet websites via Secure Web on Android you receive error "ERR_NAME_NOT_RESOLVED". | Citrix are investigating this issue. Roll back to the prior version of Chrome as a workaround. | https://support.citrix.com/article/CTX235791 | |
| 151 | Secure Mail for Android on some devices in Spanish shows "M" for Wednesday rather than "X". | The day of the week is provided by Android. Citrix found that changing the Spanish language to a different country worked. | https://support.citrix.com/article/CTX236106 | |
| 152 | You cannot share files over WhatsApp even with "DocumentExchange" set to "Unrestricted" within the MDX settings of the managed application. | Set "DisableSocialMedia" to "true" for sharing over social media to work. | https://support.citrix.com/article/CTX236091 | |
| 153 | After a PKI server change new enrolments work fine but existing devices cannot re-authenticate with Secure Hub. | Users must re-enrol devices and request a certificate from the new Certificate Authority server. | https://support.citrix.com/article/CTX236201 | |
| 154 | You cannot find an Android application in the XenMobile Public Store. | XenMobile uses the Device ID of an Android device in order to connect to the Google Play Store. Some devices are not allowed to download applications due to a Play Store restriction such as when using old devices. Extract a new Device ID from a newer phone and replace that value in the XenMobile Web Console under "Google Play Credentials". | https://support.citrix.com/article/CTX236351 | |
| 155 | Secure Web in Full VPN mode may fail to open some intranet or internet resources and the debug log file shows "ERR_NAME_NOT_RESOLVED". The use of Full VPN is suggested when using a PAC file to route through a proxy server. | Upgrade to Secure Web 10.8.35. | https://support.citrix.com/article/CTX236368 | |
| 156 | A hyperlink in a signature within Secure Mail is displayed as an HTML tag when composing an email. | This issue will be resolved in Secure Mail 10.8.50. | Citrix XenMobile Secure Mail 10.8.20.14. | https://support.citrix.com/article/CTX236564 |
| 157 | Even with Google Play integration configured, you cannot add a couple of public apps to XenMobile. | This can happen if you configured Google Play integration with a Device ID of a device which is not compatible with the applications you are unable to add. | https://support.citrix.com/article/CTX236733 | |
| 158 | Users cannot enrol when using a Symantec PKI. Secure Hub cannot receive a signed certificate from Symantec PKI. | Check the configuration of the Symantec PKI to verify if it is configured correctly. | https://support.citrix.com/article/CTX236869 | |
| 159 | When you click to edit a policy within the XenMobile Console you receive error "JSONObject["valueBool"] is not a Boolean". | Upgrade the server to clear the cache files or corrupted entries from the XenMobile database, delete policies which are created and then reboot the XM Server to check if the error disapears. Failing those actions, contact Citrix support. | https://support.citrix.com/article/CTX236874 | |
| 160 | After installing Secure Web for iOS 10.8.45, opening any website for the first time crashes the application. Subsequent browsing will not crash the application. | A fix will be released in an upcoming Seucre Web iOS release during the August 15-23 time frame. | https://support.citrix.com/article/CTX236861 | |
| 161 | You cannot enrol devices for MAM, but can enrol for MDM. | On your XenMobiel server, set the "wsapi.mdm.required.flag" to false, which is the default value. | https://support.citrix.com/article/CTX237243 | |
| 162 | When Secure Mail utilises Okta for web-based OAuth login to Office 365 or on-premises mailboxes for example, authentication fails. | Okta uses "TLS1.2-ECDHE-RSA-AES128-GCM-SHA256" during the TLS handshake which NetScaler does not support. You must prevent Okta traffic from tunneling through NetScaler when using Secure Browser by adding the required Okta FQDNs to "TUNNEL_EXCLUDE_DOMAINS". | https://support.citrix.com/article/CTX237547 | |
| 163 | Upgrade to Secure Hub 10.8.55 breaks existing and new iOS enrolments. | Upgrade to Secure Hub 10.8.57. | https://support.citrix.com/article/CTX237542 | |
| 164 | The calendar weekly view in Secure Mail on a 12" iPad Pro does not render correctly when in landscape view. | This is a known issue in older versions of Secure Mail. Upgrade to Secure Mail 10.8.55. | https://support.citrix.com/article/CTX237593 | |
| 165 | You cannot delete devices from the XenMobile Service web console. You get a deletion successful message but the devices remain in the console. | This issue is resolved in XenMobile Service 10.18.14.x. | https://support.citrix.com/article/CTX237937 | |
| 166 | You cannot enrol an iOS device to XenMobile using Secure Hub if the UPN you use contains an apostrophe. | Turn off "iOS Smart Punctuation" from "Settings -> General -> Keyboard". | https://support.citrix.com/article/CTX238046 | |
| 167 | You cannot download attachments using Secure Mail on an iPhone XS or XS Max running iOS 12. You also cannot send attachments. | Citrix are investigating this issue. | https://support.citrix.com/article/CTX238444 | |
| 168 | When accessing QucikEdit via Secure Hub you receive message "Network access might be blocked by Secure Hub". | From the XenMobile console, changing "Network access" to "Unrestricted" for the application resolved the issue. | https://support.citrix.com/article/CTX239607 | |
| 169 | You are unable to download files on an iPhone XS/XS Max from a link shared via Secure Mail which points to Citrix Files data. | Upgrade to Citrix Files 7.6. | Citrix Files 7.5. | https://support.citrix.com/article/CTX239608 |
| 170 | Password resets via Active Directory breaks Exchange ActiveSync on iOS 12 devices. | Upgrade to iOS 12.1. | Apple iOS 12. | https://support.citrix.com/article/CTX239579 |
| 171 | Secure Web is unable to access a website and receives error "net::ERR_EMPTY_RESPONSE". | The website developer needed to add the Citrix ADC SNIP as an allowed IP. | https://support.citrix.com/article/CTX239765 | |
| 172 | From Secure Mail settings, you see message "Your IT administrator has disabled Caller Identification" when browsing to the Caller Identification setting. | Make sure Secure Mail is at version 10.8.65 or later. Also make sure it is being pushed out with Caller Identification enabled within the MDX settings. | https://support.citrix.com/article/CTX238325 | |
| 173 | Secure Mail, Secure Web and other MDX wrapped applications do not launch and instead present error "This Device doesn't support encryption features required by the application". | The device in this case was using an x86 Atom processor which is unsupported for MAM and MDX applications. | https://support.citrix.com/article/CTX236129 | |
| 174 | iOS devices cannot enrol after upgrading ADC to 11.1.60.13. The logs show "AAA Client Handler: Found extended error code 589827". | ADC is dropping the enrolment request when trying to pass it to the Load Balanced vServer on port 8443. Upgrade to ADC 11.1.61.7, or any 12.0/12.1 build. | Citrix ADC 11.1.60.13. | https://support.citrix.com/article/CTX240137 |
| 175 | After completing a MAM only or MDM plus MAM enrolment with Intune, Secure Mail for Android 19.1.5 crashes when launches. | Citrix expect to fix this in Secure Mail for Android 19.2.0. | Citrix Secure Mail for Android 19.1.5. | https://support.citrix.com/article/CTX244674 |
| 176 | Internal websites cannot be accessed when using Secure Web 19.1.5 for Android. | Citrix are working on a resolution. | Citrix Secure Web 19.1.5 for Android. | https://support.citrix.com/article/CTX245391 |
| 177 | On a Huawei device, launching Secure Mail fails with error "IPC Failure communicating with Secure Hub. Try launching Secure Hub manually". | Set Secure Hub to be a protected device on the Huawei device. | https://support.citrix.com/article/CTX245774 | |
| 178 | Removing existing DEP configuration from the XenMobile Server does not work. | The Apple DEP portal was holding original configuration which needed to be removed first before it would be removed on the XenMobile Server side. Adding new configuration on the DEP portal, migrating devices to this new configuration and then removing the original configuration worked. | https://support.citrix.com/article/CTX246753 | |
| 179 | After an upgrade to Endpoint Management 19.3.1, a 404 or 500 error is witnessed on Windows desktops and tablets. | Create a new "Store Policy" which will replace the current one. | Citrix Endpoint Management 19.3.1. | https://support.citrix.com/article/CTX249857 |
| 180 | When creating an account via Secure Mail 19.3.5 you receive error "Your account could not be created" or "Secure Mail couldn't reach the server". | On Citrix ADC, add the "ECDHE-RSA-AES256-GCM-SHA384" cipher suite and enable ECC against the appropriate virtual servers. | Citrix Secure Mail for iOS 19.3.5. | https://support.citrix.com/article/CTX249825 |
| 181 | When deploying Web Clips to Android 8 and above devices, the install prompts are too quick and affect previous prompts. | A fix will be available in a future release. For now, perform "Refresh Policy" manually to retrieve the prompt for pending Web Clips. | https://support.citrix.com/article/CTX250091 | |
| 182 | After an upgrade of Google Chrome to version 74, Secure Web for Android 19.4.5 cannot display internal web pages. Error "ERR_NAME_NOT_RESOLVED" is displayed. | Upgrade Secure Web to 19.4.5.11. | https://support.citrix.com/article/CTX253765 | |
| 183 | When attempting to upload an app from the iOS public App Store using the new app URL on the App Store, you receive error "Could not find the app you entered. Check the URL and try again". | Citrix have reported this bug to Apple. Apply have made a change to the store URL from itunes.apple.com to apps.apple.com. | https://support.citrix.com/article/CTX256704 | |
| 184 | Importing an Apple Volume Purchase Program into Endpoint Management fails. | Citrix is working to resolve this issue. | https://support.citrix.com/article/CTX256701 | |
| 185 | Enrolments fail with a "INFO (4) StoreFront detected bad credentials - Secure Hub 1178" error when Endpoint Management is integrated with Virtual Apps and Desktops. | The "Logon Type" should be set to "Certificate and domain" under "Add New NetScaler Gateway". | https://support.citrix.com/article/CTX256707 | |
| 186 | Secure Mail on Android shows error "Cannot access company network" when the device is managed by Intune MAM and the device which is connected to the mail server over Micro VPN has been left idle for some time. | Upgrade to Secure Mail 19.5.5. | Citrix Secure Mail. | https://support.citrix.com/article/CTX256751 |
| 187 | After users change their password and enter their PIN, Secure Hub just sits and spins. | Follow the steps in the CTX article. | https://support.citrix.com/article/CTX232425 | |
| 188 | Secure Hub accepts 10 digit WorxPIN even when "PIN Length Requirement" is set to more than 10. | You can set the value to more than 10, but Secure Hub on iOS and Android supports only a maximum of 10. | https://support.citrix.com/article/CTX256810 | |
| 189 | Webclip policies are not being added to Kiosk enabled devices on Samsung Android 8.0/8.1 and later devices | Samsung have deprecated the Webclip feature in Kiosk mode. | Samsung. | https://support.citrix.com/article/CTX256911 |
| 190 | You are unable to see organisation hierarchy information in Secure Mail. | Enable "UseModernAuthForO365" in the Secure Mail MDX settings, and add the correct exchange hostname in the "Trusted Exchange Online Hostnames" policy. | https://support.citrix.com/article/CTX256889 | |
| 191 | After a GSLB failover for Endpoint Management, Secure Hub throws error "Couldn't Load Store". | This issue is resolved in Secure Hub 19.6.5. | https://support.citrix.com/article/CTX257533 | |
| 192 | During enrolment with Secure Hub you receive error "Access to your company network is not currently available". | This appears to be a firewall or ISP issue. When using an alternative ISP connection into the datacentre it works. | https://discussions.citrix.com/topic/403656-access-to-your-company-network-is-not-currently-available/ | |
| 193 | After upgrading Secure Hub to 19.6.5, users report that when the Full VPN is started, only applications set to use the VPN work properly. Applications not set to route through the VPN do not have access to the internet. | This is resolved in Secure Hub 19.6.6. | Citrix Secure Hub 19.6.5. | https://support.citrix.com/article/CTX257600 |
| 194 | MDX wrapped applications running on Android 9 show warning "Detected problems with API compatibility" when trying to access the camera for example from inside the wrapped application. This issue does not occur on Android 8 or iOS platforms. | Wrap the application using the MDX Toolkit 19.6.5 or above. | https://support.citrix.com/article/CTX257616 | |
| 195 | After a Android Q device re-enrolment, Secure Hub cannot connect and throws error "Citrix Secure Hub could not connect". | This occurs due to a duplicate device entry in the Endpoint Management Console. Delete the duplicate entry. The duplicate entry occurs if an Android Q device, which was previously enrolled in one mode, is re-enrolled in a different mode or Device Administration mode. | https://support.citrix.com/article/CTX259732 | |
| 196 | Secure Mail does not display phone numbers from the company address book. | This is a known issue, Citrix are investigating. | Citrix Secure Mail 19.8.0.15. | https://discussions.citrix.com/topic/404241-secure-mail-1980-no-phone-numbers-are-visible-from-company-address-book/ |
| 197 | When configuring an LDAPS connection you receive error "Could not update master user list". | Import the Root CA certificate which signed the Domain Controller certificates and try again. | ||
| 198 | User certificate Device Policy fails to deploy to devices with error "Could not create mobileconfig MyOrg_Certificates_User_Policy OSX", "Could not sign certificate" and "Read timed out". | The Certificate Services server was in a hung state and needed to be rebooted. | ||
| 199 | After upgrading to 10.13, LDAP authentication stops working. Other outgoing connections may also stop working. | Host name verification checks have been enabled. In the example of LDAP, if you previously pointed XenMobile to an LDAP VIP and used LDAPS, certificate trust issues can occur unless you use an FQDN matching the certificate sent by server. In this scenario, you may use an LDAP SSL_TCP virtual server with certificate, which avoids issues with allowing the Domain Controllers to pass their certificates during SSL handshake which may not match the FQDN you have set in XenMobile. | Citrix Endpoint Management 10.13.0. | |
| 200 | Browsing to the Endpoint Management URL over HTTPS returns error "HTTP Status 404 - Not Found". | The Self Help Portal is disabled. Within the management portal, browse to "Settings -> Server Properties" and set property "Enable Console" to "true". | ||
| 201 | Endpoint Management nodes disappear from the cluster. | This happened after a SQL failover (AlwaysOn). | ||
| 202 | After an upgrade to Citrix ADC 13.0 build 85.15 Secure Hub stops working. | This appears to be an issue with the latest ADC build and is being investigated by Citrix under bug ID NSHELP-31478. | Citrix ADC 13.0 build 85.15. | |
| 203 | After an upgrade to XenMobile 10.15 the virtual machine fails to boot with error "Unable to mount root fs on unknown-block(0,0)". | A similar CTX article exists for XenServer. The virtual machine was using a shared disk but the controller was set to LSI Logic Parallel. The fix was to change it to VMware Paravirtual. | https://support.citrix.com/article/CTX234406/kernel-panic-error-is-seen-when-trying-to-deploy-the-ova-file-for-xenmobile-server-on-vmware/ |