Hotfix Rollup Pack 2 for Citrix XenApp 6

Invalidated Hotfixes

Installing this hotfix rollup pack partially invalidates the following hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require as follows:

Invalidated Fix	Invalidated Hotfix	Replacement Hotfix
#256226	XA600W2K8R2X64111, XA600W2K8R2X64084, XA600R01W2K8R2X64062, XA600R01W2K8R2X64058, XA600R01W2K8R2X64054, XA600R01W2K8R2X64047, XA600R01W2K8R2X64043	TBD
#LA0318	XA600W2K8R2X64108, XA600W2K8R2X64098, XA600W2K8R2X64088	TBD
#LA2900	XA600R01W2K8R2X64065	TBD

Important Notes

• Caution: Several items in this hotfix rollup pack require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.
• This hotfix rollup pack contains Fix #241756, which addresses a security vulnerability. For more information, see Knowledge Center article CTX128169. [#241756]

Known Installation/Uninstallation Issues

• For information about the order of deployment to servers in a farm and other helpful best practices guidelines, see Knowledge Center article CTX120842 (Best Practices for Citrix XenApp Hotfix Rollup Pack Installation and Deployment).
• If previous XenApp hotfix(es) were uninstalled, the installation of this hotfix rollup pack can fail with Error 30010: “Citrix XenApp 6 Hotfix Rollup Pack 1 cannot currently be installed on this server. See the Citrix XenApp 6 Hotfix Rollup Pack 1 readme for a workaround. Installation will now exit.” In certain configurations, the installation does not fail with an error but not all files will be properly updated. For more information, see Knowledge Center article CTX131431.
• After installing this hotfix rollup pack, you might find the Delivery Services Console to become unresponsive when you delete streamed applications. If you are experiencing this issue or to prevent it from happening, install both a XenApp and a Delivery Services Console hotfix that contains Fix #257489.

  From the description of Fix #257489:

  This fix prevents data store inconsistencies that can result from deleting a streamed to server application from the Delivery Services Console.

  Notes:

  • To address this issue in its entirety, you must install both a XenApp and a Delivery Services Console hotfix that contains Fix #257489.
  • To identify the stale entries or errors, run the dscheck /full appscommand.
  • To remove stale entries in the streamed to server application, run the dscheck /full apps /Clean command.
• The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time the server restarts, the correct policies are in place.

  Important: If you utilize the SSLAutoConfig tool to configure SSL and plan to continue using the tool after installing this hotfix rollup pack, you must download and use the most recent version of the tool, available as Knowledge Center article CTX127580. [#228352]

• Installing this hotfix rollup pack partially invalidates several hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require. List of invalidated hotfixes
• On some Citrix XenApp servers, silent installation of hotfix rollup packs can fail and installation with UI can display the following error message: “Operation could not be completed (error 0x00000002).” If you are affected by this issue, see Knowledge Center article CTX133014 for more information.

New Fixes and Enhancements in This Hotfix Rollup Pack

Content Redirection

1. Server to client content redirection fails over HTTPS protocol when an invalid certificate is encountered. This fix adds support for the following server-side registry key that allows clients to ignore invalid certificates and proceed to the redirected link. To enable the fix in its entirety, you must also deploy a client-side hotfix that contains Fix #192003.

   HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixPolicies Name: SFTA Type: REG_DWORD Data: 0x1

   [From XA600W2K8R2X64R02][#192003]

Licensing

1. EdgeSight checks out a concurrent user (CCU) license for each user on each client device. This is different from the way XenApp uses CCU licenses, which is a single CCU license is checked out per concurrent user, regardless of the number of devices in use by that user. This fix aligns EdgeSight’s usage model of CCU licenses with that of XenApp.

   [From XA600W2K8R2X64R02][#LA0372]

Printing

1. This enhancement allows users that do not have administrative privileges to rename autocreated session printers. Prior to this enhancement, attempts by non-administrative users to rename autocreated printers fail and the following error message appears:

   “Printer Settings could not be saved. Access is denied.”

   [From XA600W2K8R2X64R02][#LA1362]

2. When using the Universal Printer driver, configuring the print quality setting (Printer > Preferences > Layout > Advanced) to Draft (150 dpi) can result in incorrect formatting.

   [From XA600W2K8R2X64R02][#LA0486]

3. Attempts to print using the Universal XPS Printer Driver can cause third party applications to exit unexpectedly.

   [From XA600W2K8R2X64R02][#LA2376]

4. In a multi-hop scenario, the Citrix Print Manager Service (CpSvc.exe) process might exit unexpectedly if the name of the printer exceeds 256 characters.

   [From XA600W2K8R2X64R02][#LA2354]

5. When using the XPS Universal printer driver to print in Internet Explorer 8 with protected mode enabled, the multiple pages per sheet setting might not be honored for users other than administrators.

   [From XA600W2K8R2X64R02][#LA0907]

6. Session printers can go offline if configured as follows:
   • Computer configuration > Administrative templates > Printers:
     

     Enable “Execute print drivers in isolated processes”

     Enable “Override print driver execution compatibility setting reported by print driver”

   • Citrix User Policies, ICA > Printing > Universal Printing: add “Universal printing,” set to “Use universal printing only”

   [From XA600W2K8R2X64R02][#LA2635]

Secure Gateway

1. This fix addresses a stability issue in an underlying component of Secure Gateway.

   [From XA600W2K8R2X64R02][#263345]

Server/Farm Administration

1. Changes to the names of administrators and administrator groups made in Active Directory are not reflected in the Delivery Services Console even if you run Discovery, restart the IMA Service, or recreate the local host cache.

   [From XA600W2K8R2X64R02][#LA0802]

2. Hotfixes can be listed twice and can be missing product information in the hotfix inventory list of the Delivery Services Console.

   To enable this fix, you must run:

   • dscheck /full HotfixFolder /Product /silent(to list the hotfixes without a product name)
   • dscheck /full HotfixFolder /Product /Clean /silent (to update the hotfixes with product information)

   Note: This fix works on English language operating systems. To enable this fix on non-English language operating systems, you must also install Fix #LA0291.

   [From XA600W2K8R2X64R02][#LA0985]

3. Attempts to use a single IP address in an IP Address rule for custom load evaluators fail; only true address ranges are supported. With this fix, singular IP addresses are supported as well.

   [From XA600W2K8R2X64R02][#LA1523]

4. With XML Service DNS address resolution enabled, applications might fail to launch from servers whose name start with 0 (zero).

   [From XA600W2K8R2X64R02][#LA1349]

5. When Modifying the and installing hotfixes or hotfix rollup pack, all custom Recovery options for Citrix Services are lost.

   With this fix, changes made to the Recovery options are retained for the following services:

   • Citrix Independent Management Architecture
   • Citrix Print Manager Service
   • Citrix Group Policy Engine
   • Citrix MFCOM Service
   • Citrix XTE Service

   [From XA600W2K8R2X64R02][#LA2377]

6. This enhancement to the dscheck.exe utility adds support for the following commands for identifying Common Application entries that have invalid icons and deleting the entries from the datastore. A common application entry is considered to have an invalid icon if the entry has a non-zero UID that is not present in the “Icons” context of the datastore:
   • dscheck /Full Apps /? dscheck displays usage help text including help text for the new /IconCheck option.
   • dscheck /Full Apps /IconCheck dscheck scans all Common Application entries in the data store and prints error messages for any entries that have invalid icons.
   • dscheck /Full Apps /IconCheck <AppName> dscheck scans the Common Application entry matching the specified “friendly” application name and prints error messages if the entry has an invalid icon.
   • dscheck /Full Apps /IconCheck /Clean Same as dscheck /Full Apps /IconCheck except that dscheck deletes all Common Application entries that have invalid icons.
   • dscheck /Full Apps /IconCheck /Clean <AppName> Same as dscheck /Full Apps /IconCheck /Clean <AppName> except that dscheck deletes the matching Common Application entry if it has an invalid icon.
   • dscheck /Full Apps /IconCheck /Clean /Silent Same as dscheck /Full Apps /IconCheck /Clean except that dscheck suppresses the prompt for permission to modify the database.
   • dscheck /Full Apps /IconCheck /Clean /Silent <AppName> Same as dscheck /Full Apps /IconCheck /Clean <AppName> except that dscheck suppresses the prompt for permission to modify the database.

   [From XA600W2K8R2X64R02][#LA1425]

Session/Connection

1. When using Ctxhide.exe to hide certain processes of published applications and Ctxhide cannot locate those processes, CtxHide.exe fails to exit and results in an orphaned session.

   [From XA600W2K8R2X64R02][#LA0285]

2. When reconnecting from a different client device to a disconnected session in which a Microsoft Office file located on a mapped client drive is open, the file can be corrupted, having a size of zero kilobytes and no contents.

   [From XA600W2K8R2X64R02][#LA0966]

3. With Workspace control enabled, attempts to disconnect the second reconnected session fail.

   [From XA600W2K8R2X64R02][#LA2205]

4. Users reconnecting to a session can experience logon delays of up to 30 seconds for each WMI filter that is configured. To disable the policy calculation during reconnect, you must set the following registry key:

   HKEY_LOCAL_MACHINESOFTWARECitrixReconnect Name: DisableGPCalculation Type: REG_DWORD Data: 1

   [From XA600W2K8R2X64R02][#LA0826]

Smart Cards

1. This fix adds additional CDF tracing for smart cards in the following modules:
   • PE_Service_CtxSmartCardSvc
   • PE_Service_CtxSvcHost
   • PE_Library_GvchBase
   • PE_Library_CtxCppBase

   [From XA600W2K8R2X64R02][#LA1296]

SmoothRoaming

1. Even with Workspace Control/SmoothRoaming enabled, users are sometimes presented with a locked desktop when trying to reconnect to a session. The issue occurs when making several reconnection attempts in rapid succession, specifically when trying to reconnect multiple times within the same 20 seconds. This behavior is as designed as the minimum wait time before a session can be disconnected is hard-coded at 20 seconds. Thus, making an additional reconnection attempt within 20 seconds of the previous attempt causes users to be presented with a locked desktop. This fix introduces fix support for the following registry key that allows you to configure the minimum wait time before a session can be disconnected:

   HKEY_LOCAL_MACHINESoftwareWow6432NodeCitrixWFShell Name: SessionReconnectMinTimeInMilliSeconds Type: REG_DWORD Value: 20000 (default)

   [From XA600W2K8R2X64R02][#LA2659]

System Exceptions

1. Servers where Fix #160592 is installed might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

   [From XA600W2K8R2X64R02][#204955]

2. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll with bugcheck code 0x7F.

   [From XA600W2K8R2X64R02][#LA0693]

3. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.

   [From XA600W2K8R2X64R02][#LA0601]

4. After installing Fix #LA0795, servers might experience a fatal exception, displaying a blue screen, on picadm.sys.

   [From XA600W2K8R2X64R02][#LA2191]

5. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.

   [From XA600W2K8R2X64R02][#LA2514]

6. Servers might experience a fatal exception, displaying a blue screen, on picadm.sys with stop code 0x7E.

   [From XA600W2K8R2X64R02][#LA2172]

7. A deadlock in the multimedia redirection module can cause Internet Explorer to become unresponsive for several minutes while launching Web applications.

   [From XA600W2K8R2X64R02][#LA2813]

8. Servers can experience a fatal exception on picadm.sys with bugcheck code 0x20.

   [From XA600W2K8R2X64R02][#LA2118]

User Interface

1. When launched in full-screen mode, Internet Explorer might not resize correctly after changing from landscape to portrait mode. Essentially, this is the result of a limitation of Internet Explorer. As such, this fix does address the issue in some cases but cannot in others.

   [From XA600W2K8R2X64R02][#LA1588]

Miscellaneous

1. The IMA Service fails to start when the value of HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixIMARUNTIMEPSRequired (64-bit Windows) is set to 1; for example, when recreating a server’s local host cache, and the System Event Log records the following error messages:

   Event Type: Error Event Source: IMAService Event ID: 3609 Description: Failed to load plugin C:Program Files (x86)CitrixSystem32CitrixIMASubSystemsMfSrvSs.dll with error IMA_RESULT_REGISTRY_ERROR

   Event Type: Error Event Source: IMAService Event ID: 3601 Description: Failed to load initial plugins with error IMA_RESULT_REGISTRY_ERROR

   On systems with Hotfix Rollup Pack 2 or later installed, the following, additional error message is also logged for each product installation that cannot be validated:

   Source: IMAService ID: 3997 Description: Installation of the following product failed verification: <Failing Product Name>. This occurs when the installer files are missing from the Windows Installer cache. Run a repair on the missing product from the Add or Remove Programs Control Panel Applet to correct this problem.

   After applying this hotfix, the IMA Service does start even if the installation of installed products cannot be verified and the System Event Log records the following, improved warning:

   Event Type: Warning Event Source: MetaFrameEvents Event ID: 1227 Description: The Citrix Independent Management Architecture service was unable to locate the required cached copies of Citrix Windows Installer files. It will ignore this error and continue to start up. However, the list of installed Citrix products may not be displayed correctly in the management consoles and future install, uninstall or upgrade of Citrix software or hotfixes may fail.

   [From XA600W2K8R2X64R02][#209308]

2. On systems with Fix #LA1167 installed, the following audit failure error is unnecessarily written to the Security Log every five minutes:

   “NTSTATUS 0xc0000062; An Error occurred during Logon.”

   [From XA600W2K8R2X64R02][#LA2589]

For more information on changes , replaced or discontinued hotfixes view this page.

Download the HRP02 here.