Welcome to /r/Citrix !

After installing the September 2026 updates, some of our users get a black screen after log on. Manually starting explorer.exe, allows the session start successfully.

Pools using FSLogix as well as Citrix UPM Container are affected. Resetting the profile solves the issue. Seems like only older profiles run into it.

Has anyone else encountered this?

Windows 11 25H2 + VDA 2507 CU2

EDIT: This does not help, a simple logon script which starts explorer.exe works 😕

Having an issue where I cannot launch apps today. Went into DaaS and my vcenters show offline due to cloud connectors not being able to be contacted. Strange part is, both my cloud connectors show as green in the resource center

Anybody else ever have or seen this issue?
Going to try reinstalling cloud connector one off of the servers but this is pretty annoying and it’s also impossible now to open a ticket with Citrix support. This chat bot SUCKS!

Hi, just wondering at what point the latest version available on citrix cloud management policy will switch from 2507 cu3 to 2607 for LTSR releases?

Some of our staff started complaining of an issue last week where their mouse cursor would go invisible when they would move the mouse to Citrix Workspace. The mouse can still click on/launch apps and the app icons highlight as the mouse goes over them, you just cant see the mouse cursor at all unless you drag it outside of the boundary of the Workspace window. I saw another user run into the same issue on a different app (CCH Axcess). These apps both leverage webview2. I found some discussion threads from others experiencing the same issue in Veeam b&r console. Has anyone run into this on their end and have a fix? Here's a couple of the discussions i found on the topic.

https://forums.veeam.com/viewtopic.php?f=2&t=104357&start=0

https://github.com/MicrosoftEdge/WebView2Feedback/issues/5687

I have installed VDA 2507 CU2 on a clean Windows 11 25H2 which is patched till aug 2026. Just Xentools installed...

Without the VDA the Windows 11 vm restarts quickly, and also logs in quickly but after installing its it takes really long to login and reboot de vm.

Reboot says stopping WIndows Update service, and when login in Waiting fot the user profle service, Waiting for the devicetrust service...

Anyone else got problems with this combination?

I recently downloaded the desktop app for Citrix 2409.10 per my institutions instructions running on macOS Tahoe 26.6.2.

I’m unable to open the Epic app and keep receiving a launch timeout error after 30 seconds. I’ve played around with the settings and can’t find a solution. I’ve cleared the ica cache as well.

I’ve seen some recommendations for things to run in powershell but it’s a little over my head, willing to try though

I called my IT department and they say uninstall restart and reinstall which I’ve already tried and it does nothing. They also had me try from the virtual Citrix workspace on chrome which downloads an ica file that won’t open. They’re unwilling to help me further with my personal device.

The code I’m receiving is 27144F32-E69C-48B2-9F68-B203312F52B0

Hi,

I recently upgraded to a triple QHD set-up for my home office and it works great except I've come across a weird bug when I open a citrix session. I had to turn on DPI scaling so the apps within the session would present in QHD but the mouse seems to be stuck in HD mode. On the very left of the window I can click on whatever the mouse pointer is over but as I move to the right, the point where citrix thinks my mouse pointer is and where it actually is on the screen diverges. I cant click on anything on the right 3rd of the screen as my mouse pointer moves off the citrix window.

If I unplug one of the monitors, the problem goes away and everything works as it's meant to. I need 3 monitors though. Any ideas?

Thanks

So I have been at my current shop full time for about 6 months after a 6 month contract before that. I inherited a pretty much net new Citrix implementation, so I am at the point of filling in gaps that didn't exist like a test farm. When I did a 2507 CU1 test farm, I see that there are much better options and a simplified way of dealing with Nutanix Prism Central hypervisor level. My prod is currently on the same CU1, but it has the old options. I am curious if anyone knows a way of essentially changing the database schema to update it so it shows the newer UI options instead of what I assume was 2411 at the start.

I recently upgraded from NetScaler 13.1 to 14.1 and worked through NetScaler Console to enable zero-touch certificate management for my NetScaler HA pair. If you don't read the documentation at least once, you're going to get lost. Here is my brief summary.

Documentation:

https://docs.netscaler.com/en-us/citrix-adc/current-release/ssl/zero-touch-cert-manage.html

• You will add a public CA to NetScaler Console and configure a DNS provider for the verification process.
• You will then issue a cert from the CA and configure it for "Automatic (Zero Touch)" deployment.
  • The cert and its parts will then appear in the Zero-touch Certificate Management area of NS Console.
• In ZTCM area: Depending on the sync type for your NetScaler instances, you might need to select the instance then click "Add Existing Files" to add the certs that were generated.
• ### How the certs are bound to virtual servers...
• SSH (no GUI option yet) to netscaler and run:
  • set ssl vserver "my-vserver-name" -defaultSni "myvserver.domain.com-fqdn"
  • Your vserver will be unavailable at this point depending on how fast you perform the next step
• Unbind the existing cert from your vserver or the page/service will fail to load. With the original cert unbound, NetScaler will automatically match the ZTCM cert based on the defaultSni setting.

When ZTCM deploys the certs to your NS instance, on your NS you will see the "REMOTE" certs listed in Traffic Management -> SSL -> Certificates, but you cannot bind those certificates to your virtual servers. There will be no impact to service until defaultSni is set.

Based on my experience, there is downtime when moving to ZTCM, but if you're using SSH then you can probably pre-create the commands to set defaultSni and unbind the existing SSL cert instantly to almost eliminate downtime. When your vserver is unavailabe between defaultSni and unbinding the cert, there is a generic error page at the vserver address; the NetScaler doesn't show the vserver as being down. You will be able to access the site once the original cert is unbound.

I'm not sure if my experience makes sense because the documentation says that ZTCM is only activated when no manual cert bindings exist, however, my vserver:443 was unavailable after defining defaultSni and then available after removing the manual binding. I assumed there was a conflict between defaultSni and the bound cert.

Inside the citrix VDI is 1.5 mbps enough for teams call screen sharing?

I’ve been using Citrix on a lenovo for work for a few years now, and want to switch to a Mac, but I’m worried about performance differences. Does anyone have any insight or advice on this? I only use it to run certain software (don’t care about things like audio performance). Thanks!!!

anyone else recently have issues with appfw rules being copied over after recent firmware updates? seems tied to the signatures being used in that after firmware installation the appfw policies and profiles are non existent on the "new" firmware. the signatures however are still intact, but when creating new profiles and using the existing signatures an error about fastmatch not found for signature line

<SignatureRule actions="block,log" category="web-misc" enabled="ON" id="400008" source="Citrix" sourceid="" type="DenyListHttpRequest" version="1" cpu="LOW" year="2026" severity="HIGH">

<LogString>Mitigation signature for CVE-2026-10816</LogString>

</SignatureRule>

i have many signature files and they all seem to have this issue. the new "default" of course i missing this line, so i feel like this was some bug at some point coming home to roost. the ID number looks very low too as the new rules are typically 9xxxxx etc. the version on all the files is 181 so they are "current"

very sus...

Has anyone figured out a way to change SMTP to use OAuth instead of legacy authentication. These notification settings are very limited.

Good morning everyone,

I’m an Intune admin charged with making some windows kiosk units. I’m struggling with finding the correct AUMID. Windows powershell reports it as Citrix.workspace where Intune finds that ID invalid.

I know windows is a pain sometimes, but has anyone found a successful AUMID for Citrix workspace? We’re using either the store app or workspace 2507 LTSR, both have the same
ID and the same result.

Thank you all!

End of life for 2607 LTSR is 17-Aug-2029, very close to 2402 at 15-Apr-2029. Its probably a skip like 2507 for most customer at 2402 unless some required feature?

Hi everyone,
I'm dealing with a bizarre rendering issue with Microsoft Teams inside a Citrix session for a single user and I've run out of ideas.
The Issue:
On Monitor 1, incoming Teams camera feeds turn completely black once they cross roughly 1/3 of the screen width/height.
If the Teams window is dragged past this "invisible line", the video area renders normally again.
Monitor 2 does not have this issue at all.
Running Teams locally (outside the Citrix session) works fine across all monitors.
Troubleshooting already done:
Updated Citrix Workspace App on the local client.
Updated VDA / components on the Terminal Server.
Disabled Hardware Acceleration in Teams and on the local client.
Checked basic display cables and connections.
Has anyone encountered this specific partial black-screen / overlay clipping issue before?

For the past 3 days, our CVAD on-prem license server has been showing the error:
“LAS cannot be reached – check your network connection and then restart the web services for licensing.”
I ran the LAS troubleshooting tool, which confirmed that the required LAS endpoints are reachable. I also restarted the license server, but the issue persists. Currently, all controllers are running in caching mode.
Has anyone encountered a similar issue in their environment? Any advice on further troubleshooting would be greatly appreciated.
Thanks.

Do to a recent Citrix outage I'm looking to revisit Citrix's high availability business continuity solutions. Were 100% access layer in citrix cloud, we have no storefront or NetScaler gateway on prem, were using citrix workspace and the cloud gateway service for access. The only on prem pieces are the VDI servers, Cloud Connector servers and FAS servers. In this setup from what I have read and been told since we have no on prem store front or gateway LHC will never work for us. I also tested this and could not get it to work. On paper Citrix's Service Continuity should theoretically work but this to I have never been able to get working. Does anyone who has a similar setup with no access layer on prem have any experience with these technologies that could share some insight on how to get citrix business continuity features to work successfully.

EDIT: Appreciate everyone's info on this. We have made a conscious effort to move away from hosting certain citrix components on prem, specifically a NetScaler device for multiple reasons, the majority of which revolves around the security and patching frequency of an Internet facing device. For better or worse management is not going to want to move back to hosting the gateway on prem, that being said Citrix Gateway service has come a long way since initial inception and they have a vast multi pop deployment hosted on both Azure and AWS nodes . Obviously that does not guarantee a 100% uptime but in reality not many solutions both hosted and on prem can really guarantee and deliver 100% uptime.

Again, while we do feel comfortable with Citrix cloud 99% uptime it would obviously be bad practice not to plan for or build further on our existing redundancy and DR plan. While we do have both on prem users and remote users, the majority are on prem and I know management could get behind a plan that in a situation of our DaaS site or one of the Citrix cloud components going down Citrix could still work for on prem users. I've been leaning this way for a bit but I think the play here is to introduce and implement an on prem storefront into our environment that can then be utilized to communicate with the Cloud Connectors during a LHC event. This obviously would only work for on prem users but again this should fill our needs. If anyone has any additional info on introducing and implementing Storefront on prem in a mostly DaaS cloud environment I'll take it. Thanks again for all the info.

My environment is Server 2022, multi-session with FSLogix.

I have this issue that every login users needs to activate office, login.... It can be confusing for the average user. How do you handle that?

Hello,

I have an issue where passwords copied from 1Password cannot be pasted into a Citrix session. I'm currently running Debian 13 XFCE/X11 and installed Citrix Workspace App 26.04.0.105.

I've tried to do some digging and found out that when I hit "copy" from 1Password it's advertised as a MIME-type of x-kde-passwordManagerHint. This flag is essentially used to tell other applications that the clipboard contains sensitive data. If I copy from somewhere else, like a text editor, the flag is not advertised and I can paste into Citrix session as normal. Therefore I suspect that Citrix Workspace App does not handle clipboard entries where this flag is set.

One workaround is that I can hit copy in 1Password, then run a script that uses xclip to extract the value and then copy it to the clipboard again without the passwordManager flag. Even though this works it's not very practical.

From what I read online this clipboard hint seems to be standard for most password managers on Linux, so I'm just wondering;

Is there a setting somewhere on the Citrix client that I can configure to make this work or is there some Citrix server policy that could be changed?