Recommended Hotfixes for XenApp 6.x on Windows Server 2008 R2

Issue:

• A deadlock in picadm.sys can cause servers to become unresponsive. Sessions Already connected might disconnect and prevent servers from accepting new connections.

• The IMA Service might become unresponsive, preventing existing sessions from logging off and new sessions from connecting.

• Launching several sessions concurrently can cause the server CPU consumption to be higher than expected.

• Servers might experience a fatal exception, displaying a blue screen, on picadm.sys.

• Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

• Users reconnecting to a session can experience logon delays of up to 30 seconds for each WMI filter that is configured.

Available Software Update:

Other XenApp 6.0 Citrix Hotfixes

Issue:

• The Add-XAAutoReplicatedPrinterDriver cmdlet takes a parameter named sourceservername. However, get-help add-xaautoreplicatedprinterdriver – examples incorrectly states that the cmdlet takes a parameter named servername.
• This fix addresses various issues with published icons.

Available Software Update:

Issue:

• This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements and required components, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.

Available Software Update:

Recommended XenApp 6.5 Hotfixes prior to Hotfix Rollup Pack 7 

All the individual Hotfixes prior to Hotfix Rollup Pack 07 have been replaced by it for XenApp so far. Hotfix Rollup Pack 07 introduces a number of new fixes and enhancements that have not been released previously for a number of issues listed below.

Issues:

• The svchost.exe process for Terminal Services might close unexpectedly with an application Event ID 1000 and can cause the Remote Desktop and Receiver connections to the server to fail.

• After installing Hotfix Rollup Pack 5, the XTE service fails and drops user sessions.

• The ImaSrv.exe process might exit unexpectedly.

• Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

• Terminal Services can exit unexpectedly on RPM.dll.

• A session can be terminated before the first application launches. The issue can occur when a one-minute time-out is exceeded, for example, when the profile share is located across a WAN link rather than on a local share

• The CPU consumption of the winlogon.exe process can be higher than usual and cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted.

• Pass-through authentication fails in a pass-through client.

• After shadowing a session, the win32k.sys and vdtw30.dll files can leave the session unresponsive on the server; the session cannot be reset.

Available Software Update: This Hotfix Rollup Pack replaces most individual hotfixes released for this version of XenApp so far, and introduces a number of new fixes and enhancements that have not been released previously.

Recommended XenApp 6.0 Hotfixes prior to Hotfix Rollup Pack 2

All the individual Hotfixes prior to Hotfix Rollup Pack 02 have been replaced by it for XenApp so far. Hotfix Rollup Pack 02 introduces a number of new fixes and enhancements that have not been released previously for a number of issues listed below.

Issues:

• When a server running Access Fundamentals/XenApp 6 Fundamentals Edition is in a workgroup, the Citrix license cannot be retrieved and application launch fails, resulting in the following error message:  "License Acquisition failed..."

• This fix addresses security vulnerability. For more information, see CTX123359 - Transport Layer Security Renegotiation Vulnerability.

• This fix addresses session reliability issues that can occur when using multiple, disparate, client devices to reconnect to the same session.

• This fix addresses security vulnerability. For more information, see CTX128169 - Vulnerabilities in XenApp and XenDesktop could result in arbitrary code execution.

• Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 0xf4 on IMAAdvanceSrv.exe. 

• Servers running XenApp 6 can become unresponsive when shutting down. The issue occurs when the picadm.sys driver encounters certain error conditions that prevent it from shutting down in an orderly fashion. Also, servers might experience a fatal exception, displaying a blue screen on picadm.sys with bugcheck code 0x22 (FILE_SYSTEM).

• If a session is disconnected while it is still reading or writing a Client Drive Mapping (CDM) file, the resulting deadlock condition can prevent servers from accepting new session requests.

• Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. The issue occurs when the user removes a thumb drive from a client device while connected to a session.  Dumps indicate that picadm.sys is referencing invalid, possibly disconnected volumes.

• When the ReadOnlyMappedDrive registry key (HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\services\picadm\Parameters) is set to 1, published applications can no longer access and browse mapped client drives.

• With folder redirection enabled, servers can experience a fatal exception, displaying a blue screen, on picadm.sys. The issue can be observed when attempting to save a file that was introduced into the session on a USB device attached to and then removed from a thin client device.

• Servers with Hotfix XA600W2K8R2X64018 installed can become unresponsive intermittently. The issue occurs when a scheduled reboot is triggered by a Citrix policy while there are active sessions on the server.

• With Session Reliability enabled, ICA connection attempts fail if the ICA Listener is bound to a single NIC in a multi-homed environment.

• The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time the server restarts, the correct policies are in place.

• This fix addresses two installation issues:

  • Hotfixes fail to install on a XA6 server that has not yet had the XenApp Server Role configured.

  • Installing hotfixes or performing a repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component, if present, from the system. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes. 

• Servers might experience a fatal exception, displaying a blue screen while shadowing is started.

• This fix addresses security vulnerability. For more information, see Knowledge Center article CTX129430 - Vulnerabilities in XenApp and XenDesktop could result in arbitrary code execution.

• Certain applications fail to launch when Administrator Approval Mode is enabled in User Account Control.

• This fix addresses the following issues for sessions launched as streamed to server or by a script: 1) The application name can be missing from the session information of the Delivery Services Console Session and not appear under the Applications folder of the Delivery Services Console. 2) Application limits might be ignored. 3) Attempts to reconnect to disconnected sessions might fail.

• Certain applications can perform slowly when run in seamless mode

• The CPU consumption of the winlogon.exe process can be higher than usual and it might cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted.

• Attempts to log on to a XenApp 6 server using Version 7 or earlier versions of the clients can cause svchost.exe to exit unexpectedly. As a result, further connection attempts to the server fail until it is restarted.

• The CPU consumption of the CitrixCseEngine.exe process can spike unexpectedly and cause logon delays.

• Attempts to launch a published application that resides on a mapped network drive rather than on a XenApp server failure

• When connecting to a server running Windows Server 2008 R2 with Service Pack 1, Terminal Services can exit unexpectedly. This causes users to experience a black screen when logging on and the logon process fails to complete.

• A rare race condition that occurs when a shadowee disconnects at roughly the same time a shadower connects can cause servers to experience a fatal exception, displaying a blue screen on RPM.dll.

• The fix addresses an issue where the IMA Service exits unexpectedly when a network adapter is not bound to an IP address.

• Servers might become unresponsive or experience a fatal exception on rpm.dll when an administrator initiates a shadowing session.

• Pass-through authentication fails after applying Hotfix XA600W2K8R2X64048.

• This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements, required components, and known issues, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.

• This enhancement allows printing within a session using ICA Proxy through Branch Repeater.

• During times of heavy logon/logoff activity, sessions can become unresponsive while connecting. The "Starting <application name>" message appears but the connection attempt fails to complete.