Citrix Self-Service Password Reset “Cannot access your server address!”


  • Windows Server 2016
  • Citrix XenApp 7.15
  • Citrix XenApp Self-Service Password Reset


Creating a new ‘User Configuration’ in the ‘Enable Self-Service Password Reset’ section


  • The Service Address returns and error “Cannot access your service address!”.


  • Browsing to https://fqdn/MPMService returns “Error 403 – Forbidden: Access is denied”
  • Event Viewer has the following:





  1. Disable the Internet Explorer proxy server, if possible
  2. Enable ‘Bypass proxy server for local addresses’
  3. Create a proxy server exception






Citrix WEM – “Manage Printer” Application

We are currently using an on house written app that allows users to add/remove/set as printer their network printers.

Our users like this custom tool because its so simple to navigate around but going into our new XenApp 7.15 environment on Windows Server 2016 OS this tool doesn’t work.

In this new environment we are going to implement Citrix Workspace Environment Management (WEM) and I noticed it comes with the ‘Manage Printers’ function as part of the WEM agent deployed to the XenApp Member servers, this tool is very good but its semi hidden away and takes a couple of clicks to find it where our users were used to having a desktop printer icon to get to the custom app.

I decided to see if the WEM ‘Manage Printers’ function can be made into a desktop icon, the details to turn this into an application are:

  • Command Line: C:\Program Files (x86)\Norskale\Norskale Agent Host\PrnsMgmtUtil.exe
  • Working Directory: C:\Program Files (x86)\Norskale\Norskale Agent Host
  • Icon File: C:\Windows\System32\shell32.dll
  • Icon Index: 16
  • Display Name: Printer Management
  • Action Type: Create Application Shortcut

Dont forget to ‘assign’ the new application in Action Assignment.

VMware vCenter 6 Web Console doesn’t load or very slow

Update (05 Sept 2017):

After changing the value to 512MB we continued to have this issues on and off, contacted VMware Support yet again and now they have advised to increase the MaxPermMB from 512 to 1024 (which is apparently the max value this can go to). We will continue to monitor to see if there is any improvement.


VMware vCenter 6.0.0 Build 4541948 (Update 2a) – could effect other vCenter versions also.


After a period of a week or more the vCenter Web Console slows down dramatically to the point where the website doesn’t load anymore and the browser times out.

Looking into the /var/log/vmware/vsphere-client/logs/vsphere-client-virgo.log file you it displays the following Out Of Memory error:

Run: less vsphere-client-virgo.log


“[2017-03-15T13:59:07.853+13:00] [ERROR] ing.timer.TimerFactoryBean#0 o.s.scheduling.timer.MethodInvokingTimerTaskFactoryBean Invocation of method ‘update’ on target class [class HealthStatusUpdater] failed java.lang.OutOfMemoryError: PermGen space”


  1. (Workaround) Reboot the vCenter, according to VMware Support you should reboot it often to ensure the vCenter doesn’t run out of memory.
  2. (Permanent fix) Increase the memory size for vspherewebclientsvc in the service-layout.mfx file from 256 to 1024.
    1. Use WinSCP to connect to vCenter Server
    2. Browse to and edit: /etc/vmware/service-layout.mfx
    3. Find the line with the firstboot_name ngc_firstboot
    4. Under the column ‘MaxPermMB’ change the value from 256 to 1024
    5. Save service-layout.mfx file
    6. SSH to vCenter Server
    7. Run: /etc/init.d/service vsphere-client restart

Deploy ESXi 6.0 upgrade to Update 2 Fails


When attempting to remediate an ESXi host with 6.0 Update 2, the following error displays in Update Manager:

“The host returns esxupdate error code:14. There is an error when resolving dependencies. Check the Update Manager log files and esxupdate log files for more details.”

In /var/log/esxupdate.log

esxupdate: ERROR: DependencyError: VIB VMware_bootbank_vsanhealth_6.0.0-3000000. requires esx-base >= 6.0.0-2.43, but the requirement cannot be satisfied within the ImageProfile.


There is a dependency for Update 2 that needs installing first,  weirdly enough the dependency is included in Update 2.


  • Enable ESXi Shell and SSH on ESXi host
  • Download Update 2 from VMware Patches
  • Copy zip file to /vmfs/volumes/datastore (file is too large to copy to /var/tmp)
  • Use Putty to connect to ESXi host
  • Run: esxcli software vib install -n esx-base -n vsan -n vsanhealth -d /vmfs/volumes/datastore1/update-from-esxi6.0

-n = Specifies VIBs from a depot, using one of the following forms: name, name:version, vendor:name, or vendor:name:version.

-d = Specifies full remote URLs of the depot index.xml or server file path pointing to an offline bundle .zip file.


  • Reboot the ESXi host.
  • To confirm the components installed correctly run: esxcli software vib list
  • These are the dependencies and versions installed:


  • Once the server is back online now use Update Manager to remediate Update 2 (and any additional patches) onto ESXi host.

NetScaler SDX – Unknown Device, not supported by Command Center


  • Citrix NetScaler SDX appliances
  • Citrix Command Centre 5.x (and think it occurs in version 4.x also) on Windows Server 2008 R2


While running a NetScaler SDX discovery in Command Centre the discovery fails with the following error message:

“Unknown device ; <sdx_ip_address> ; not supported by command center”

(The discovery of the NetScaler VPX instances discovered fine independently)

– Checked discovery logs and found the below error:

Troubleshooting Steps:

– Checked from the Command Centre server and was able to ping and SSH to SDX Management IP with same credentials used in the Command Centre NetScaler SDX profile.
– In the C:\Program Files (x86)\Citrix\Citrix Command Center\logs\discoveryLogs.txt log file, I could see it was trying to add the NetScaler SDX as “CBSDX” (CloudBridge SDX I assume).

  • INVENTORYERR: Device not recognized as CBSDX. SYSID null <sdx_ip_address>
  • INVENTORYERR: Exception while login to =<sdx_ip_address>
  • Localized : English : nsroot failed to login


Within Command Centre,

  • On the Administration tab,
  • Under Settings,
  • Click SSL Settings and then
  • Select the Enable TLSv1 option
  • Restart the Command Centre service.

NOTE: After restarting the Command Centre service and its running again, it can take a while before your able to log in again.

Check the service status in the C:\Program Files (x86)\Citrix\Citrix Command Center\logs\wrapper.log file

INFO | jvm 1 | 2016/05/23 14:47:00 | Starting up as Primary Server and correcting the Server information in the Database.
INFO | jvm 1 | 2016/05/23 14:47:00 |
INFO | jvm 1 | 2016/05/23 14:47:01 |
INFO | jvm 1 | 2016/05/23 14:47:01 | Starting Citrix Command Center “Primary” Server Modules, please wait
INFO | jvm 1 | 2016/05/23 14:47:15 |
INFO | jvm 1 | 2016/05/23 14:47:15 |
INFO | jvm 1 | 2016/05/23 14:47:15 |
INFO | jvm 1 | 2016/05/23 14:47:15 | Process : SyslogServerBE [ Started ]
INFO | jvm 1 | 2016/05/23 14:47:16 | Process : ProcessTest [ Started ]
INFO | jvm 1 | 2016/05/23 14:47:17 | Process : ShutdownDatabaseServer [ Started ]
INFO | jvm 1 | 2016/05/23 14:47:19 | Process : CLIRMIService [ Started ]

If you see a lot of [Failed] statues, restart the Command Centre server.


“Please wait for User Profile Services” – Logon delay


  • Windows Server 2008 R2
  • Citrix XenApp 6.5 RU5


During users logon to XenApp published applications and published desktops there can be a lengthy delay on “Please wait for the User Profile Services”, it can hang on this for up to 30 secs.


In the Group Policy Management browse to:

  • Computer Configuration
    • Administrative Templates
      • System
        • User Profiles

Modify the policy setting “Set maximum wait time for the network if a user has a roaming user profile or remote home directory” to “Enabled” and set the value Wait for network for maximum (seconds) to 0.

User session stuck on XenApp server


  • Windows Server 2008 R2
  • Citrix XenApp 6.5


User’s session is stuck on XenApp server, logging off from AppCenter doesn’t remove them.


1.Log onto the RDS server and launch Remote Desktop Services Manager or connect via another server.

2.Get the Session ID of the hung session from the Session tab:

  • Session: Disconnected
  • User: <Blank>
  • ID: <number>
  • State: Disconnected
  • ClientName: <Blank>
  • LogOnTime: Unknown

3.Click on Processes tab

4.Click on ID column to sort the processes by ID

5.Find the hung ID number

6.There is normally 3 processes visible

  • LogonUI.exe
  • Winlogon.exe
  • Csrss.exe

7.Right-click on winlogon.exe and End Process, once you end this process the other 2 will disappear.

8.DO NOT end process on csrss.exe, this will crash and reboot the RDS server

9.Now the user has cleared from the RDS server and from AppCenter.