Posts

NetScaler: Issuer certificate mismatch

Image
After importing a PKCS#12 certificate on a customer NetScaler the error: "Issuer Certificate mismatch, or PEM pass phrase required for this private key". To solve this issue you need to re-export the certificate and uncheck the "Include all certificates in the certification path if possible" checkbox. It's a known bug at Citrix like you can read here: https://support.citrix.com/article/CTX226986

Implementing Single Sign On with NetScaler and Kerberos Constrained Delegation (KCD)

Image
I wrote a manual how you can realize a Single Sign on Solution with Kerberos KCD and NetScaler. It's possible to restrict the user delegation to certain services/protocols on a server. You'll need this if NetScaler is not knowing the user password. If it knows the user password you can realize the SSO with Kerberos Impersonation. This will be an extra post. Let's start with creating a KCD account. 1. Create KCD Accounts Create KCD Account in AD Password never expires should be chosen 1.1    Enable the delegation tab for this user You can activate it with setspn ( It is available if you have the Active Directory Domain Services (AD DS) server role installed) Needs to be run from an elevated command prompt setspn -A host/KCDTest@simon.ns simon\KCDTest 1.2 Choose the delegation option Here you need to chose "Trust this user for delegation to specified services only" and also "use any authentication protocol". ...

Implementing User Acceptance Test (UAT) in a existing XenApp 7.13 environment

Image
I had to implement a UAT in an existing XenAPP 7.13 environment. Therefore i used Zones for realizing this. You can use this feature since version 7.7. As installation guide I followed the blog article from my co-worker Matthias Schlimm (Citrix CTA). You find is full manual here: Citrix XenApp / XenDesktop – Zone preference

Nutanix: removing hotplug devices

Image
Maybe you saw, when you right click  "safely remove hardware and eject media". You have the option to eject the ethernet adapter and a few other things which you might want to avoid to be ejected due to the fact that your Nutanix Box isn't reachable anymore afterwards. Therefore just update the Reg_DWORD of capabilities key to (2): HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PCI\VEN_1AF4&DEV_1000&SUBSYS_00011AF4&REV_00\3&13c0b0c5&0&18 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PCI\VEN_1AF4&DEV_1002&SUBSYS_00051AF4&REV_00\3&13c0b0c5&0&28 HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\PCI\VEN_1AF4&DEV_1004&SUBSYS_00081AF4&REV_00\3&13c0b0c5&0&20 Afterwards it shouldn't be there anymore:

Summary of the Nutanix .Next Tour in Frankfurt: Dive into Hyperconverged Infrastructure Day 2

Image
Let me give you some information about my second day on the Nutanix .Next Tour in Frankfurt. For everybody who missed my first post about the day before the tour you'll find it here: https://simonscitrix.blogspot.com/2018/02/summary-of-nutanix-next-tour-in.html This day was the actual day of the Tour. A lot of Nutanix partners had a stand in the showroom and the visitors had the possibilities to take part in hands-on labs and watching demos like from HYCU (see my first Post). The day started with a keynote and I want to give you a short summary off the topics. Nutanix  Nutanix was rated by Gartner as the hyper converged infrastructure leader with a net rate of 90+. I want to say that 70+ is already very good. They have  7k customer in 130 countries, 3k+ employees, 1b+ runrate, $800m+ software. Nutanix challenge ist o have not a single cloud. They try to offer multiple cloud solutions like public cloud (AWS, azure etc) and combine it with a private cloud for all...

Summary of the Nutanix .Next Tour in Frankfurt: Introducing the first only Nutanix Backup Solution Day 1

Image
This is my first Article about Nutanix. I was partially involved in a Nutanix/Citrix VDI blog and I was quite impressed from the capabilities Nutanix offers  and decided to dive deeper in the world of hyper converged infrastructure. So I visited the .NEXT Tour in Frankfurt on February 06th 2018. If you missed it, no worries. Next stops are: Utrecht, Netherlands March 06 2018 London, United Kingdom March 14 2018 Dubai, United Arab Emirates April 10 2018 So let's start with Monday 05th. I visited an evening reception from ADN and Comtrade where they presented the first backup and recovery Solution for Nutanix called HYCU. It's very performant for Acropolis File Server (AFS), Acropolis Block Services (ABS), Acropolis Object Storage Services (AOSS), and can be implemented in a 4-3-2 Method. Learn in less than 4 Minutes Deploy in less than 3 Minutes Recover in less than 2 Minutes Key integration topics with Nutanix are: Storage Level Snapshots Data In...

Upgrade Citrix XenApp from 7.13 to 7.15 LTSR

Image
I will descripe on this site how we can update the XenApp Infrastructure from XenApp 7.13 to XenApp 7.15 LTSR. I'm not the first with such a documentation, but I want to share my experience with you. 1.0 Hints for updating XenApp to Version 7.15.1 Make sure that the Citrix Telemetry Service is stopped. Otherwise the update process will fail.  1.1 Back up the Delivery Controller databases Before you can start with the Citrix update process you need to back up the Citrix databases. These are: Site – stores running site configuration, current session state and connection info. Logging – Information about site configuration changes and administrative activities (only enabled when configuration logging is enabled) Monitoring – stores Director data, like session and connection information. 1.2 Upgrade Director Update your Citrix Director if it is installed on a separate machine from your Delivery Controllers After you inserted the Citrix XenApp/XenDesktop 7.15 Edi...