Hotfix Rollup Pack 1 for XenApp 6.5 notes

As you could read in this post Citrix has released Hotfix Rollup pack 1 for XenApp along side the Feature Pack.

In this post is described what the changes, replaced hotfixes and fixes are.

Replaced Hotfixes

This hotfix rollup pack replaces the following hotfixes:

XA650W2K8R2X64001, XA650W2K8R2X64002, XA650W2K8R2X64004, XA650W2K8R2X64005, XA650W2K8R2X64006, XA650W2K8R2X64007, XA650W2K8R2X64008, XA650W2K8R2X64009, XA650W2K8R2X64011, XA650W2K8R2X64012, XA650W2K8R2X64013, XA650W2K8R2X64014, XA650W2K8R2X64015, XA650W2K8R2X64016, XA650W2K8R2X64017, XA650W2K8R2X64018, XA650W2K8R2X64019, XA650W2K8R2X64020, XA650W2K8R2X64021, XA650W2K8R2X64022, XA650W2K8R2X64023, XA650W2K8R2X64024, XA650W2K8R2X64025, XA650W2K8R2X64026, XA650W2K8R2X64027, XA650W2K8R2X64028, XA650W2K8R2X64029, XA650W2K8R2X64030

Important Notes

  • Caution: Several items in this hotfix rollup pack require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.
  • Skype might not recognize the camera, in which case the video portion of the Skype call is missing. To avoid this, make sure the camera is connected before launching Skype. If necessary, sign out of Skype and then sign back into Skype. In some cases, it might be necessary to disconnect and reconnect the camera before signing back into Skype.

Known Installation/Uninstallation Issues

  • For information about the order of deployment to servers in a farm and other helpful best practices guidelines, see Knowledge Center article CTX120842 (Best Practices for Citrix XenApp Hotfix Rollup Pack Installation and Deployment).
  • Installing this hotfix rollup pack partially invalidates several hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require. List of invalidated hotfixes
  • On some Citrix XenApp servers, silent installation of hotfix rollup packs can fail and installation with UI can display the following error message: “Operation could not be completed (error 0x00000002).” If you are affected by this issue, see Knowledge Center article CTX133014 for more information.
  • If you intend to use the Universal Print Server feature, Citrix recommends that you install the Universal Print Server Client before installing this hotfix rollup pack. Otherwise – if you install the Universal Print Server Client after this hotfix rollup pack – a Windows Security dialog appears while you install the Universal Print Server Client.  If this happens, click “Install this driver software anyway” to finish the installation.
  • While uninstalling this hotfix rollup pack from servers with the Universal Print Server Client installed, you may be prompted for the XenApp 6.5 base installer file (mps.msi), available on the XenApp 6.5 original source media. Also, after uninstalling this hotfix rollup pack, you must uninstall and then reinstall the Universal Print Server Client in order for the client to function properly.

New Fixes in This Release

This hotfix rollup pack introduces the following fixes that have not been previously released:

Content Redirection Server/Farm Administration
End User Experience Monitoring Session/Connection
HDX Plug and Play Shadowing
IMA Service Smart Cards
Installing, Uninstalling, Upgrading SpeedScreen
Licensing System Exceptions
Logon/Authentication User Experience
Memory, CPU Optimization Virtual IP
Printing Miscellaneous
Seamless Windows

Content Redirection

  1. Server to client content redirection fails over HTTPS protocol when an invalid certificate is encountered. This fix adds support for the following server-side registry key that allows clients to ignore invalid certificates and proceed to the redirected link. To enable the fix in its entirety, you must also deploy a client-side hotfix that contains Fix #192003.HKEY_LOCAL_MACHINESOFTWARECitrixPolicies Name: SFTA Type: REG_DWORD Data: 0x1

    [From XA650W2K8R2X64R01][#192003]

  2. Client to server content redirection does not work for .msg files and for mailto: links in some versions on Microsoft Outlook. To enable this fix, you must set the following registry key:HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlCitrixwfshellTWI Name: PublishedAppCommandLineFlag Type: REG_DWORD Data: 0x2

    [From XA650W2K8R2X64R01][#208999]

  3. The “Host to client redirection” policy for URLs does not work properly.[From XA650W2K8R2X64R01][#255911]
  4. Server to client content redirection for URLs can fail due to an incorrect implementation of HTTP and HTTPS redirection.[From XA650W2K8R2X64R01][#LA0025]

End User Experience Monitoring

  1. Application launches can fail to be captured in the case of applications where the published executable exits within a few moments of the launch.Note: To address this issue in its entirety, you must install a hotfix that contains Fix #LA0066 before installing this fix; or install a hotfix that contains Fix #LA0066 and Fix #LA0572. Fix #LA0066 is available as a EUEM hotfix (for Presentation Server and XenApp for Windows Server 2003) and as a XenApp hotfix (for Windows Server 2008).

    [From XA650W2K8R2X64R01][#LA0572]

HDX Plug and Play

  1. This fix provides webcam support for Adobe Connect and Skype 5.5 in virtual desktop sessions.[From XA650W2K8R2X64R01][#LA1259]

IMA Service

  1. The IMA Service fails to start when using multiple NIC teams and the RDP listener is assigned to only one NIC team.[From XA650W2K8R2X64R01][#253346]
  2. This fix addresses an issue where the IMA Service exits unexpectedly when a network adapter is not bound to an IP address.[From XA650W2K8R2X64R01][#LA0040]
  3. The IMA Service can exit unexpectedly on zone data collectors. This can happen when trying to remove empty zones or when multiple zones are created at the same time by way of servers joining a farm and creating their own zone instead of being directed to an existing zone.[From XA650W2K8R2X64R01][#258895]

Installing, Uninstalling, Upgrading

  1. This fix addresses an issue that prevents the successful installation of XenApp hotfixes on certain servers.[From XA650W2K8R2X64R01][#LA1218]


  1. EdgeSight checks out a concurrent user (CCU) license for each user on each client device. This is different from the way XenApp uses CCU licenses, which is a single CCU license is checked out per concurrent user, regardless of the number of devices in use by that user. This fix aligns EdgeSight’s usage model of CCU licenses with that of XenApp.[From XA650W2K8R2X64R01][#LA0372]


  1. Regardless of the number of invalid logon attempts permitted by way of an Active Directory policy, users are locked out of Active Directory after just one invalid logon attempt to the Shadow taskbar.[From XA650W2K8R2X64R01][#259528]
  2. When reconnecting to an application published for anonymous users, users are prompted for credentials.[From XA650W2K8R2X64R01][#LA0222]
  3. If users change their domain password while connecting to a server and enter a non-matching confirmation password, the session can become unresponsive and disappear after 2 minutes.[From XA650W2K8R2X64R01][#LA0170]
  4. Regardless of the number of invalid logon attempts permitted by way of an Active Directory policy, users are locked out of Active Directory after just one invalid logon attempt to the Shadow taskbar.Note: This fix is a port of Fix #259528 to XenApp for Windows Server 2008 R2.

    [From XA650W2K8R2X64R01][#LA1405]

Memory, CPU Optimization

  1. Processes added to the memory optimization exclusion list (Computer policy > Server Settings > Memory/CPU > Memory optimization application exclusion list) using their full path rather than just the process name are not excluded from optimization.[From XA650W2K8R2X64R01][#LA0036]


  1. With a Citrix policy in place not to autocreate printers but use only the Citrix Universal Printer, the universal printer is not available when you connect to a session from a second client device.[From XA650W2K8R2X64R01][#254142]
  2. With a printing policy configured to disable client printer mapping or if there a no client printers, session printers fail to be created.[From XA650W2K8R2X64R01][#LA0116]
  3. If you change the default client printer while disconnected from a session and then reconnect to that session, the new printer is not added and the previous printer is not deleted as the default printer.[From XA650W2K8R2X64R01][#LA0132]
  4. A race condition when launching or reconnecting to a session can prevent some session printers from being created.[From XA650W2K8R2X64R01][#LA0216]
  5. The Citrix Print Manager Service (CPsvc.exe) can exit unexpectedly while deleting a user’s session printers at logoff. When this happens, session printers fail to be created for newly connected sessions until the service is restarted.[From XA650W2K8R2X64R01][#LA0155]
  6. The Citrix Print Manager Service (CpSvc.exe) might fail intermittently.[From XA650W2K8R2X64R01][#260434]
  7. The Citrix Print Manager Service (CpSvc.exe) process might exit unexpectedly. As a result, the printers fail to autocreate.[From XA650W2K8R2X64R01][#LA1131]
  8. This enhancement allows users that do not have administrative privileges to rename autocreated session printers. Prior to this enhancement, attempts by non-administrative users to rename autocreated printers fail and the following error message appears:”Printer Settings could not be saved. Access is denied.”

    [From XA650W2K8R2X64R01][#LA1362]

  9. After applying Microsoft article KB2620656, session default printers are not set correctly.[From XA650W2K8R2X64R01][#LA1294]
  10. This enhancement is a component of the Citrix Universal Print Server, a feature that extends universal printing support to network printing. For more information, including system requirements, see Citrix Universal Print Server in eDocs.[From XA650W2K8R2X64R01][#LA1428]

Seamless Windows

  1. Certain applications can perform slowly when run in seamless mode.[From XA650W2K8R2X64R01][#257490]
  2. When Excelhook is enabled, if you modify the file name of an open Excel file from the Save As dialog box, the file name is not updated in the Windows Taskbar.[From XA650W2K8R2X64R01][#LA1501]

Server/Farm Administration

  1. Attempts to connect to a disconnected session from a published instance of the Delivery Service Console fail and the following error message appears: “IMA_RESULT_NOT_SUPPORTED (0x8000003a).”[From XA650W2K8R2X64R01][#240447]
  2. Custom administrators with Allpermissions cannot view the processes running in a session. The following error message appears:”Object not found.”

    [From XA650W2K8R2X64R01][#LA0101]

  3. EventID 1542 and EventID 45 warnings appear in the Event Log for VPTray.exe even after attempting to suppress them according to the procedure described in Knowledge Center article CTX113486.[From XA650W2K8R2X64R01][#258785]
  4. Attempts by read-only administrators to count worker groups using citrix.xenapp.commands fail.[From XA650W2K8R2X64R01][#262549]
  5. EdgeSight reports on published application launch counts can show fewer launches than the actual numbers. This happens as a result of application launches triggered by other published applications such as scripts and commands. Such launches can intermittently fail to be captured.Note: To address this issue in its entirety, you must install a hotfix that contains Fix #LA0136. Fix #LA0136 is available as an EdgeSight for XenApp Agents hotfix. The combination of Fixes #LA0066 and #LA0136 resolves the issue in most scenarios. Additionally, consider installing a XenApp hotfix that contains Fix #LA0572. Fix #LA0572 addresses this issue specifically in scenarios with short-lived sessions (sessions shorter than 5 seconds).

    [From XA650W2K8R2X64R01][#LA0066]

  6. When viewing load evaluator usage reports, the following message appears indefinitely, and the report fails to be populated with information:”Gathering data”

    [From XA650W2K8R2X64R01][#LA0369]

  7. When executing Auditlog.exe with the “/time” option, the total time logged on displayed in the output log is incorrect.[From XA650W2K8R2X64R01][#257693]
  8. Custom administrators might not be able to obtain session count values. However, fulladministrators can obtain exact session count values.[From XA650W2K8R2X64R01][#LA0597]
  9. When executing Auditlog.exe with the /fail option, no output is generated. When executing Auditlog.exe with the /detailoption, some of the logon failure information is incorrect.[From XA650W2K8R2X64R01][#LA0897]
  10. Changes to the names of administrators and administrator groups made in Active Directory are not reflected in the AppCenter even if you run Discovery, restart the IMA Service, or recreate the local host cache.[From XA650W2K8R2X64R01][#LA0802]
  11. Using disjoint namespaces as a result of modified DNS suffixes prevents servers from appearing in Organizational Unit (OU) based worker groups.[From XA650W2K8R2X64R01][#LA1167]
  12. This release provides an update to the DSCHECK utility in support of the Worker Group feature.[From XA650W2K8R2X64R01][#LA1579]
  13. Note: This issue is present only in the Japanese version of XenApp:In deployments using an Oracle database as the Configuration Logging database, attempts to view the configuration log from the History node of the AppCenter fail due to an incompatible Date/Time format.

    This fix is disabled by default. For more information about the fix and instructions for enabling it, see Japanese Knowledge Center article CTX133338.

    [From XA650W2K8R2X64R01][#LA1778]


  1. COM port redirection can fail with the following error message:”System error 66: The network resource type is not correct.”

    [From XA650W2K8R2X64R01][#256475]

  2. On systems with Fix #249548 and #248473 installed, the Citrix Audio Service (CtxAudioSvc.dll) might exit unexpectedly.[From XA650W2K8R2X64R01][#258889]
  3. Attempts by a process A to access a mapped COM port inside a session fail when a process B is already using that port. This enhancement displays an error message to alert users to the issue.[From XA650W2K8R2X64R01][#LA0067]
  4. Attempts by anonymous users to enumerate applications can fail intermittently.[From XA650W2K8R2X64R01][#254227]
  5. Visual Studio 2010 retains foreground focus when switching between it and other applications. After applying this fix, you must set the following registry keys:For 32-bit processes:

    HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixCtxHookAppInit_DllsMultiple Monitor Hook Name: DevEnv.exe Type: REG_DWORD Data: see below*

    For 64-bit processes:

    HKEY_LOCAL_MACHINESOFTWARECitrixCtxHookAppInit_DllsMultiple Monitor Hook Name: DevEnv.exe Type: REG_DWORD Data: see below*

    * Data: Calculate the value as follows:

    • If a value exists, add 0x00100000 to the existing value.
    • If a value does not exist, see Knowledge Center article CTX115637 for value information for your specific environment. Add 0x00100880 to that value.

    [From XA650W2K8R2X64R01][#LA0306]

  6. When using Ctxhide.exe to hide certain processes of published applications and Ctxhide cannot locate those processes, CtxHide.exe fails to exit and results in an orphaned session.[From XA650W2K8R2X64R01][#LA0285]
  7. With Excelhook enabled, attempts to close Microsoft Excel 2010 workbooks from Windows Vista and Windows 7 taskbar icons fail.[From XA650W2K8R2X64R01][#LA1154]
  8. Viewing a seamless instance of IrfanView in full-screen mode prevents users’ ability to log off the session.[From XA650W2K8R2X64R01][#LA0947]
  9. In certain scenarios, COM ports fail to get redirected.[From XA650W2K8R2X64R01][#LA1191]
  10. Sessions can randomly disconnect during session launch.[From XA650W2K8R2X64R01][#LA1137]
  11. When launching a published application, Special Folder Redirection might fail to work when the Session ID is “1”.[From XA650W2K8R2X64R01][#LA1423]
  12. If the farm policy settings for “Connection Access Controls” are set to allow access for Citrix Access Gateway, Citrix online plug-in, and Web Interface connections only, users connecting through the Web Interface might not be able to launch applications. Attempts to launch applications might fail with a WSXICA 9 error in the server Event log.[From XA650W2K8R2X64R01][#LA1074]
  13. Attempts by certain third-party applications to write to mapped client drives can fail.[From XA650W2K8R2X64R01][#LA1508]
  14. Attempts to reconnect to a non-seamless session fail and create a new session instead if the application name contains certain non-ASCII characters.[From XA650W2K8R2X64R01][#LA1659]
  15. Clearing the “Allow connections made through Access Gateway Advanced Edition” option in the “Application Properties” of an application can prevent the Log Off or Disconnect buttons of that application from working. As a result, users cannot disconnect or close the application from the Web Interface.[From XA650W2K8R2X64R01][#LA1670]
  16. Session sharing fails for sessions launched from Version 5.4 of the Web Interface if:
    • the Client printer redirection XenApp policy is set to Allowed (default), but the Enable printer mapping option under Remote Connection > Connection Performanceon the Web Interface is cleared, or
    • the Client printer redirection XenApp policy is set to Prohibited, but the Enable printer mapping option under Remote Connection > Connection Performance on the Web Interface is checked.

    [From XA650W2K8R2X64R01][#LA1477]


  1. The shadow logging policies might not log events to the Event viewer properly.[From XA650W2K8R2X64R01][#259216]
  2. Granting a custom administrator “Remote Control” permission on ICA Listeners – necessary for cross-shadowing – can result in the administrator’s ability to shadow users who are not explicitly specified in the administrator’s shadowing policy.[From XA650W2K8R2X64R01][#LA0102]
  3. Sessions might disconnect unexpectedly during shadowing due to a memory leak.[From XA650W2K8R2X64R01][#259055]

Smart Cards

  1. The Windows logon screen of the first connection attempt after a server restarts does not show the smart card tile.[From XA650W2K8R2X64R01][#LA0848]


  1. In a session with SpeedScreen Latency Reduction enabled, fonts initially appear as Marlett before displaying in the specified font style.To enable this fix, you must set the following registry key:
    • On 32-bit Windows: HKEY_LOCAL_MACHINE SOFTWARECitrixCtxHookAppInit_DllsZero Latency Name: IgnoreMarlettFont Type: REG_DWORD Data: 1
    • On 64-bit Windows: HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixCtxHookAppInit_DllsZero Latency Name: IgnoreMarlettFont Type: REG_DWORD Data: 1

    [From XA650W2K8R2X64R01][#LA0253]

System Exceptions

  1. Unplugging a USB device from a thin client while a file is being copied to or from the USB device, can cause the following error message to appear:”An error has occurred. The destination you have specified does not exist. It might be an offline network location or an empty CD or DVD drive. Check the location and try again.”

    After clicking Cancel in response to the error message, the session eventually becomes unresponsive.

    [From XA650W2K8R2X64R01][#260100]

  2. Servers might experience a fatal exception, displaying a blue screen, on picaser.sys.[From XA650W2K8R2X64R01][#252534]
  3. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.[From XA650W2K8R2X64R01][#259309]
  4. Terminal Services can exit unexpectedly on RPM.dll.[From XA650W2K8R2X64R01][#LA0135]
  5. Servers might experience a fatal exception, displaying a blue screen, on wdica.sys.[From XA650W2K8R2X64R01][#260211]
  6. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.[From XA650W2K8R2X64R01][#LA0187]
  7. Some applications within an ICA session can become unresponsive while attempting to access a smart card reader attached to the endpoint.[From XA650W2K8R2X64R01][#LA0361]
  8. At times of heavy logon/logoff activity, one or more of the following can be observed:
    • Applications can exit unexpectedly.
    • During logon attempts, an Error 1030 appears on the endpoint.
    • During logoff attempts, the Virtual Desktop Agent returns to the Logon screen and the endpoint continues to display the Desktop Viewer.

    [From XA650W2K8R2X64R01][#LA0388]

  9. A consumer thread that fails to exit during logoff can cause the CPU consumption of custom load evaluators to reach 100 percent.[From XA650W2K8R2X64R01][#LA0257]
  10. This fix addresses a rare memory leak in MFCOM.exe.[From XA650W2K8R2X64R01][#259088]
  11. A rare race condition can cause the Citrix Audio Service (CtxAudioSvc.dll) to exit unexpectedly.[From XA650W2K8R2X64R01][#LA0350]
  12. Attempts to run Citrix Windows Management Instrumentation (WMI) query as an unprivileged user can fail and cause multiple Windows services to exit unexpectedly.[From XA650W2K8R2X64R01][#LA0459]
  13. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys with Errors 22 and 7E.[From XA650W2K8R2X64R01][#LA0430]
  14. Refreshing the user list in the Shadow Taskbar can cause the server to become unresponsive and to no longer accept new connections.[From XA650W2K8R2X64R01][#LA0473]
  15. PNMain.exe can exit unexpectedly when using the online plug-in as the pass-through client.[From XA650W2K8R2X64R01][#LA0785]
  16. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll with stop code 0x00000050.[From XA650W2K8R2X64R01][#LA0565]
  17. Servers can become unresponsive upon restart if the XenAppPrep Integration Utility has the following GPO enabled:Computer ConfigurationAdministrative TemplatesWindows ComponentsRemote Desktop ServicesRemote Desktop Session HostConnectionsConfigure keep-alive connection interval.

    [From XA650W2K8R2X64R01][#LA0543]

  18. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys with bugcheck code 0x34.[From XA650W2K8R2X64R01][#LA0795]
  19. Servers might experience a fatal exception, displaying a blue screen, on Ctxpn.sys with bugcheck code D1.[From XA650W2K8R2X64R01][#LA0913]
  20. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll with bugcheck code 0x7F.[From XA650W2K8R2X64R01][#LA0693]
  21. With Windows Driver Verifier enabled for vdtw30.dll, servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll with stop code 0xD6.[From XA650W2K8R2X64R01][#LA1122]
  22. A race condition can cause the Citrix Audio Service (CtxAudioSvc.dll) to exit unexpectedly.[From XA650W2K8R2X64R01][#LA1160]
  23. Servers might experience a fatal exception, displaying a blue screen, on wdica.sys with bugcheck code 0x7E. The issue occurs when using a Belgian (period) keyboard layout and non-Windows clients in a session which results in an unhandled exception.[From XA650W2K8R2X64R01][#LA0915]
  24. Servers might experience a fatal exception, displaying a blue screen, on PICAVC.SYS.[From XA650W2K8R2X64R01][#LA0950]
  25. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.[From XA650W2K8R2X64R01][#LA0601]
  26. The IMA Service might exit unexpectedly when an Oracle data store becomes unavailable.[From XA650W2K8R2X64R01][#LA1134]
  27. A disconnecting session can render the server unresponsive. No ICA, RDP or console session can be established until you restart the server. The issue is caused by one or more pending writes on a stack while the stack is being disconnected. This fix introduces a configurable counter that determines the number of times to attempt the write before failing it when a disconnect on the stack was initiated.To configure the counter, you must set the following registry key:

    HKEY_LOCAL_MACHINESYSTEMcurrentcontrolsetcontrolterminal serverwdsicawd Name: DisconnectTimeoutRetry Type: REG_DWORD Data: A value in the range of 10 – 150 (recommended value: 50)

    [From XA650W2K8R2X64R01][#LA1106]

  28. The memory consumption of the IMASrv.exe process on a zone data collector might increase over time until it can no longer handle requests.[From XA650W2K8R2X64R01][#LA0893]
  29. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys with bugcheck code 0x34.[From XA650W2K8R2X64R01][#LA1194]
  30. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.[From XA650W2K8R2X64R01][#LA1389]
  31. At times of heavy connect/disconnect activity, server memory consumption can reach 100 percent. As a result, servers can refuse to reconnect sessions and to gather data. On rare occasions, this can lead to severs’ experiencing a fatal exception, displaying a blue screen.[From XA650W2K8R2X64R01][#LA1836]

User Experience

  1. When run in seamless mode and/or in multiple monitor configurations, certain applications experience screen flickering.[From XA650W2K8R2X64R01][#254115]
  2. Clicking Favoritesin an instance of Windows Internet Explorer running on a published desktop and then inserting or removing a USB storage device causes the Internet Explorer window to refresh unnecessarily.This fix introduces support for the following registry key that, when set, prevents the window refresh:

    HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixCtxPnP Name: PnpRefreshClassExclusion Type: REG_SZ Data: IEFrame

    [From XA650W2K8R2X64R01][#261548]

  3. Gemalto’s regtool.exe can show a handle leak in the client session if the endpoint does not have smart card drivers installed.[From XA650W2K8R2X64R01][#LA1333]

Virtual IP

  1. This fix addresses an issue with the PreferLoopback and PreferLoopbackProcesses registry settings under HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixVIP not being utilized properly.[From XA650W2K8R2X64R01][#LA1647]


  1. Provisioned XenApp servers refuse to accept connections if they are restarted while the license server is unavailable. The issue occurs because the license server cache file, MPS-WSXICA_MPS-WSXICA.ini, is saved in the %ProgramFiles(x86)%Citrixsystem32cache folder, which might be unavailable when the server image shuts down.This fix allows you to save the license server cache file in a shared network location – a location separate from the XenApp server image – so that the file is available even when the server image shuts down. If you save the file in a location away from the server image, you must set the following registry key to point to the cache file location:

    HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixInstall Name: CacheLocation Type: REG_SZ Data: <network location of license server cache file>

    Note: You must restart the server after this registry edit in order for the license file to be cached.

    For more information, see Knowledge Center article CTX131202.

    [From XA650W2K8R2X64R01][#242177]

  2. After changing a server’s IP address, connection attempts can fail.[From XA650W2K8R2X64R01][#LA0019]
  3. Hotfixes fail to update IIS files under IISScripts if you change the configuration of the Citrix XML Service to share the default TCP/IP port with IIS as described in Knowledge Center article CTX125107. After applying this fix, the XMLChoice registry key will be set properly.[From XA650W2K8R2X64R01][#262722]
  4. The wfshell.exe process can experience a minor handle leak upon reconnecting a session.[From XA650W2K8R2X64R01][#LA1852]

Fixes from Previously Released Hotfixes

This hotfix rollup pack includes the following fixes from replaced hotfixes:

  1. Pass-through authentication fails in a pass-through client.[From XA650W2K8R2X64001][#LA0337]
  2. When using a custom Delivery Services Console as described in Knowledge Center article CTX126752, the following can be observed:
    • Client-side seamless application windows can get corrupted when moved or resized after the shadowing stops.
    • Mouse operations can be erratic when shadowing is stopped and then resumed; specifically, the mouse pointer appears to be parked in the top left corner of the session window and immediately returns to that general area after attempting to move it.

    Note: To address this issue in its entirety, you must install both a server and a client hotfix that contains Fix #258866.

    [From XA650W2K8R2X64002][#258866]

  3. This release provides the following features and enhancements to servers running XenApp 6.5:Support for Additional Communications Software:

    In addition to Microsoft Office Communicator and Lync, XenApp now supports the use of Web cams in conjunction with the following communication software published on XenApp 6.5 servers:

    • Citrix GoToMeeting with HD Faces
    • Skype
    • Adobe Connect

    Enhanced Audio Virtual Channels:

    Enhancements have been made to the audio virtual channels to help reduce latency. This results in improved performance of softphones and the voice chat feature of Unified Communications applications.

    Adaptive Display Settings for Smooth-running Videos and Slide Shows:

    Previously available in XenDesktop 5.5, Adaptive Display is now enabled by default in XenApp 6.5. Adaptive Display dynamically adjusts image quality and frame rates to deliver the best possible user experience when viewing graphics or server-rendered video content over a limited bandwidth network connection. Adaptive Display is the successor to Citrix’s highly successful Progressive Display technology. Adaptive Display is self-tuning and generally does not require configuration. However, Adaptive Display policies are available should you wish to adjust the behavior of this feature. To configure Adaptive Display on XenApp 6.5, use Windows Group Policy Editor (gpedit.msc)* and follow the procedures outlined in eDocs, the Citrix Documentation Library.

    * Note: At this time, Adaptive Display policies cannot be configured using AppCenter. Use Windows Group Policy Editor (gpedit.msc) instead.

    Windows Media Redirection Enhanced Flow Control:

    Enhancements to Windows Media Enhanced Flow Control provide improved results for streamed HD videos delivered over WAN connections.


    Flow control is an integral part of multimedia redirection that is responsible for choosing and adjusting the rate at which multimedia data is transmitted to the client and defining a strategy to reduce the bit rate when network conditions are unfavorable. The effectiveness of the flow control implementation has a fairly large impact on the overall end user experience.

    The enhancements

    • End-to-End Flow Control. Video samples are no longer queued in the host-side virtual channel and instead force data to back up in the DirectShow/MediaFoundation interception filters. The major benefit here is reliability; video controls remain responsive even when network conditions are unfavorable.
    • Frame Dropping. Sometimes the available bandwidth is less than the bit rate of the video being played. Frame dropping enables flow control to preserve the audio and playback synchronization at the expense of the video. It is important to note that key frames will never be dropped because these frames are often used as reference frames from which other frames will be constructed. In addition to key frames, decoders also use the last decompressed non-key frame as a reference frame. For this reason, once a non-key frame is dropped, all subsequent non-key frames are dropped (until the next key frame is found). Otherwise, the video becomes progressively noisier.


    Frame dropping has some limitations. It is not always known ahead of time how many frames will be dropped for a given media type. Frame dropping does not typically occur until the effective network bandwidth approaches or drops below the bit rate of the media file. Users should have reasonable expectations for the user experience. In most cases, frame dropping will provide a benefit but the amount of video that is dropped can vary from media file to media file.

    Note: Adaptive Display generally provides a better user experience than frame dropping when the available bandwidth is less than the bit rate of the video. For this reason, customers who need to deliver HD videos with bit rates of 6 or 7 Mbps are advised to set the SmartRendering Bandwidth Threshold to 8 Mbps to ensure that Windows Media Redirection is used only when there is sufficient bandwidth. For more information about setting the SmartRendering Bandwidth Threshold, see Knowledge Center article CTX124777.

    Supported media formats

    WMA, WMV, ASF, MP3, Divx, Xvid, and MPEG-4. Other formats, such as MPEG-1 and MPEG-2, continue to use the old flow control.

    [From XA650W2K8R2X64002][#LA0584]

  4. Certain applications fail to update the time stamp on client files after successful write operations.[From XA650W2K8R2X64004][#248008]
  5. Attempts by certain custom applications to overwrite an existing file can fail. Instead, the application appends the new information to the existing file.[From XA650W2K8R2X64004][#LA0472]
  6. Custom per-window exception flags/Seamless per application window registry flags as described in Knowledge Center article CTX101644does not work on XenApp 6 and XenApp 6.5.[From XA650W2K8R2X64005][#259761]
  7. With the “Reboot Schedule randomization interval” policy configured, MFCOM can become unresponsive and the IMA Service fails to start when the server starts.[From XA650W2K8R2X64006][#LA0545]
  8. If a smart card is present in the card reader at the client device, the smart card PIN prompt can fail to appear. The issue occurs when a legal notice banner is configured and the user does not dismiss (accept) the notice within four seconds of its appearance. In such scenarios, the PIN prompt does not appear as the wait for the smart card event times out. This fix introduces support for the following registry key to extend the amount of time, in seconds, before a timeout on the smart card event occurs:HKEY_LOCAL_MACHINESOFTWARECitrixSmartCard Name: SSEEETimeout Type: REG_DWORD Data: <Range of 4-120 (decimal)>

    With the above registry key set, the application launches properly if the user dismisses the interactive logon message within 40 seconds; otherwise the application exits after providing the smart card PIN. To prevent this and give users up to 120 seconds to respond to the PIN prompt, additionally set the following registry key:

    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlCitrixwfshellTWI Name: LogoffCheckerStartupDelayInSeconds Type: REG_DWORD Data: <An integer for the length of time to wait for application start. – Enter the delay time in seconds, up to 10 minutes (600 seconds), but no less than the value configured for SSEEETimeout above.>

    [From XA650W2K8R2X64007][#LA0012]

  9. The creation of client network printers in certain network configurations can be delayed by up to two minutes per printer. This happens as a result of an improper implementation of the policy, “Direct connections to print servers.”[From XA650W2K8R2X64008][#LA0744]
  10. In double-hop scenarios, some applications are not able to access the smart card certificate.To enable this fix, you must set the following registry key:

    HKEY_LOCAL_MACHINESOFTWARECitrixSmartCard Name: EnableCtxCleanup Type: REG_DWORD Data: 1

    [From XA650W2K8R2X64009][#LA0502]

  11. When reconnecting to a disconnected session where the wall paper is set using a group policy, the desktop wallpaper is no longer set.[From XA650W2K8R2X64011][#260318]
  12. Users cannot connect to XenApp 6 servers when using a NOERROR licenses file on the License Server.[From XA650W2K8R2X64011][#LA0286]
  13. After shadowing a session, the win32k.sys and vdtw30.dll files can leave the session unresponsive on the server; the session cannot be reset.[From XA650W2K8R2X64011][#LA0589]
  14. This release is a part of the XenApp 6.5 Mobility Pack. Documentation for the mobility pack is available in eDocs at To install the mobility pack in its entirety, you must also install the following Group Policy Management hotfixes or their replacements:
    • CitrixGroupPolicyManagement_x64.msi (GPMx150WX64002) and/or
    • CitrixGroupPolicyManagement_x86.msi (GPMx150WX86002)

    [From XA650W2K8R2X64011][#LA0881]

  15. After a user’s logoff, the IMA Service might exit intermittently.[From XA650W2K8R2X64012][#LA0956]
  16. This enhancement is a component of the Citrix Universal Print Server, a feature that extends universal printing support to network printing. For more information, including system requirements, see Citrix Universal Print Server in eDocs.[From XA650W2K8R2X64013][#LA0880]
  17. Attempts by administrators to reconnect to a disconnected session can be intercepted by a license error message and then fail.[From XA650W2K8R2X64014][#LA0571]
  18. Attempts to reconnect to a locked published desktop can fail with one or more of the following error messages:
    • “Element Not Found”
    • “The Network Connection Doesn’t Exist”

    [From XA650W2K8R2X64014][#LA0740]

  19. Attempts to establish an RDP session with a XenApp 6.5 server from a Windows XP client device fail when using a UPN that exceeds twenty characters in length. To enable this fix, you must set the following registry key:HKEY_LOCAL_MACHINESOFTWARECitrix Name: AllowLongUserName Type: REG_DWORD Data: 1

    [From XA650W2K8R2X64014][#LA1120]

  20. Pass-through authentication with Kerberos fails for some applications using Unconstrained Delegation. For more information about implementing Kerberos Authentication in a Citrix XenApp Environment, see Knowledge Center article CTX121918.[From XA650W2K8R2X64015][#258392]
  21. In certain configurations, hotfixes for XenApp 6.5 fail to install and the following error message appears:”Error 25703. An error occurred while plugging XML into Internet Information Server. Setup cannot copy files to your IIS Scripts directory. Please make sure that your IIS installation is correct.”

    The issue occurs on systems where, during the initial installation, you choose for the Citrix XML Service (CtxHttp.exe) not to share a port with IIS and .Net Framework 3.5.1 Features are installed on the system.

    [From XA650W2K8R2X64016][#LA1166]

  22. A published toolbar might not dock correctly in the client work area. As a result, other application windows might cover it in full or in part.[From XA650W2K8R2X64017][#259495]
  23. A published IME language bar is grayed out and does not respond to mouse input when restored from the notification area.[From XA650W2K8R2X64018][#LA0221]
  24. When attempting to launch an additional instance of a published desktop configured to be limited to a single instance per user, the following, incorrect error message appears:”Connection Error: The Citrix server has reached its concurrent application limit for this application. Please contact your system administrator.”

    After installing this fix, the following, correct message appears in such scenarios:

    “Connection Error: You already have an instance of this application open and are not allowed to run more than one instance. Please contact your system administrator.”

    [From XA650W2K8R2X64018][#LA0675]

  25. On systems with Fix #LA0129 installed, attempts to shadow a reconnected session from the Delivery Services Console fail with “Error 7044: The request was denied.”[From XA650W2K8R2X64018][#LA0726]
  26. Launching several sessions concurrently can cause the server CPU consumption to be higher than expected.[From XA650W2K8R2X64018][#LA1068]
  27. After opening an application in a full-screen published desktop, disconnecting and reconnecting to the session, and then maximizing the previously opened application, the application is positioned behind the Windows Taskbar.[From XA650W2K8R2X64018][#LA1136]
  28. Applications built using the Borland development environment might fail to launch, resulting in an invalid bitmap exception. The issue occurs when the name of the bitmap exceeds 11 characters in length.[From XA650W2K8R2X64018][#LA1205]
  29. This feature enhancement adds Windows Group Policy support to touch-optimized desktops.[From XA650W2K8R2X64018][#LA1302]
  30. Touch-optimized desktops might exit unexpectedly upon launch while running in locked down environments.[From XA650W2K8R2X64018][#LA1303]
  31. The CPU consumption of the winlogon.exe process can be higher than usual and cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted.[From XA650W2K8R2X64019][#LA0032]
  32. Servers can become unresponsive intermittently. The issue occurs when a scheduled reboot is triggered by a Citrix policy while there are active sessions on the server.[From XA650W2K8R2X64020][#258490]
  33. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.[From XA650W2K8R2X64020][#259963]
  34. When using Secure Gateway, SSL-secured sessions might disconnect unexpectedly, reporting an SSL Library Error 45.[From XA650W2K8R2X64021][#259611]
  35. The Citrix audio DMO filter currently does not support audio format conversion and prevents some applications from converting audio formats correctly. This fix introduces a registry key that lets you disable the Citrix audio DMO filter for a list of applications you specify:On 32-bit Windows:

    HKEY_LOCAL_MACHINESOFTWARECitrixSpeedscreenmultimedia Name: Disabledexecutables Type: REG_MULTI_SZ Data: List of applications to be excluded

    On 64-bit Windows:

    HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixSpeedscreenmultimedia Name: Disabledexecutables Type: REG_MULTI_SZ Data: List of applications to be excluded

    [From XA650W2K8R2X64022][#194521]

  36. A session can be terminated before the first application launches. The issue can occur when a one-minute time-out is exceeded, for example, when the profile share is located across a WAN link rather than on a local share.This fix introduces support for the following registry key that allows you to configure the time-out as follows:HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlCitrixwfshellTWI Name: ApplicationLaunchWaitTimeoutMS Type: REG_DWORD Data: <desired additional time-out, in milliseconds>

    Note: Specifying a value of less than 10000 reverts to 10000 because 10 seconds is the minimum override.

    [From XA650W2K8R2X64025][#248815]

  37. Users can be randomly presented with a Windows logon screen prompting them for credentials for nonexisting sessions.[From XA650W2K8R2X64025][#LA0030]
  38. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll.[From XA650W2K8R2X64025][#LA0562]
  39. Pass-through authentication (with Kerberos integrated Windows authentication) fails when launching a session from a Web Interface site. As a result, users are presented with a logon screen prompting them for credentials in order to proceed.[From XA650W2K8R2X64025][#LA0573]
  40. Administrators cannot establish an RDP connection to XenApp when the Desktop launches or the ICA user policy is set to “Prohibited”.[From XA650W2K8R2X64025][#LA0742]
  41. When using Active Directory Federation Services (ADFS) or Access Gateway Enterprise Edition with Single sign-on, smart card pass-through authentication might not work.[From XA650W2K8R2X64025][#LA1211]
  42. With shadow logging policy enabled, the UID of the shadowee might not appear in the Event Log.[From XA650W2K8R2X64025][#LA1384]
  43. Server to client content redirection for URLs can fail to work in a client session in Internet Explorer 8 or later.[From XA650W2K8R2X64025][#LA1504]
  44. Terminal Services can exit unexpectedly on RPM.dll.[From XA650W2K8R2X64025][#LA1539]
  45. This fix addresses a security vulnerability: For more information, see Knowledge Center article CTX133159.[From XA650W2K8R2X64026][#LA0315]
  46. Thin clients fail to reconnect to their disconnected sessions running on XenApp 6 and XenApp 6.5 servers if they use the client name as a means of finding the disconnected session.[From XA650W2K8R2X64028][#LA0874]
  47. This fix addresses an issue that can cause the Citrix XML Service to become unresponsive or exit unexpectedly.[From XA650W2K8R2X64029][#LA1734]
  48. With the Citrix Universal Printer Driver or the Citrix XPS Universal Printer Driver the default printer on a server, most page layouts in the 64-bit edition of Microsoft Word 2010 show a paper size of 8.5″ x 11″.[From XA650W2K8R2X64030][#LA1719]

Installing and Uninstalling This Hotfix Rollup Pack


  • See the Known Installation Issues with This Release section for known install behaviors and their workarounds.
  • This hotfix rollup pack might or might not prompt you to restart the server when the installation is complete. If you are using the Delivery Services Console, you must restart the server after installing this hotfix rollup pack to ensure that it is added to or removed from the console’s hotfix inventory list.

To install this hotfix rollup pack:

  1. Copy the hotfix rollup pack to an empty folder on the hard drive of the server you want to update.
  2. Close all applications.
  3. Run the executable.
  4. Restart the server.
  5. If you are using the Delivery Services Console, restart the server to ensure the hotfix rollup pack is added to the console’s hotfix inventory list.

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.