World of EUC

FYI - <https://support.citrix.com/article/CTX477396/unable-to-install-the-cloud-connector-due-to-being-unable-to-validate-certificate-chain>

image.png

Is this for use with Storefront of workspace service?

Ideally a pair of FAS servers in each resource location for redundancy.  But they can be the same pair of servers linked to each RL if you have internal inteconnetivity between physical locations. 

Agree with Paul you can also in workspace define the other datacenter as a secondary.  The good thing about Workspace Service versus Storefront is that if FAS doesn't work with Workspace the user will get prompted for creds.  That does not happen with Storefront in many fault scenarios.  Remember to include all of the FAS servers in the GPO applied to the FAS servers and VDAs is you are using the backups too.

Partner in crime is asking in general <https://worldofeuc.slack.com/archives/CK6RVLZ8S/p1680712104857289>

When I was testing it, I had a trick to bypass it. But it has been about 1 year since then.

I have 100s of Win11 on VMware leveraging vTPM

vTPM is all we are talking about for this. But no prod yet here. UAT only for most part

Was there a reason for vTPM over physical tpm cards in the hosts?  Was it decided by lack of cards, or a functional reason?

meaning, if we already have the TPM cards is there a reason to use vTPM over phyiscal anyway?

<@ULRF0Q64E> IMO no. It's there to do one job that works just fine with vTPM

Hi Team, Have any one seen this error before in Server VDA.. Due to which temp profiles are getting created ..WebCacheLocal: An attempt to open the file "C:\Users\xxx\AppData\Local\Microsoft\Windows\WebCache\V01tmp.log" for read / write access failed with system error 1920 (0x00000780): "The file cannot be accessed by the system. ".  The open file operation will fail with error -1022 (0xfffffc02).
Event Xml:

Thank you <@US9H89R34> for your reply.. It is in CPM

I saw this not long ago .. I will check and came back to you tomorrow;)

i found this interresting article : <https://discussions.citrix.com/topic/403101-server-2016-start-menu-inaccessible/page/2/>

i have faced this as well when i work on Edge exclusion. i don't know if you use edge or any app layer.

Gbeixndjaiixnbfbfneiaicbbdheysusushdbzbbaheidbd 

it's only happening in this CVAD channel...

We will stick to test thread above going forward 

so much for testing in thread... the Discord bridge appended the [thread] prefix vs keeping threaded...

Will move to a test channel going forward 

<@UL5TCSW3D> wasn’t this one of your adventures?

Yes it was, see the latter part of this post <https://james-rankin.com/articles/quickpost-publishing-windows-explorer-in-citrix-and-rdsh/>

What about my alternative?
<https://www.meinekleinefarm.net/tablacus-explorer-is-an-awesome-replacement-for-explorer-exe-as-a-xenapp-published-application/|https://www.meinekleinefarm.net/tablacus-explorer-is-an-awesome-replacement-for-explorer-exe-as-a-xenapp-published-application/>

Customer managed CVAD term/subscription licenses. 

thanks Jarian. so if i have a client that has both On-prem and daas.  Are these the only licenses i need for the On-prem environment?

No word yet, but I would expect it in May given the current track record of releases.

thank you. Need that BSOD Issue solved, private fix is just a workaround :v:

I'm also eagerly waiting for the UPS hotfix fom 1912 CU7 to be ported over to 2203 LTSR

Hi,
My customer is in a multi-forest environment.
 I have to implement FAS in his environment.
Citrix components (Storefront/ Delivery Controller / License server / VDI / FAS) are in the A forest
Users and PKI are in forest B.
How can I make FAS aware of the PKI that is in the other forest ?
Do I have to do it in powershell using "New-FASAuthorizationCertificate" cmd , do I have to indicate at AD level that the PKI is in the other forest or do I have to create a sub-CA?
Thank you

I woulod configure the gpos so that storefront and fas servers in each site just work wiht that sie but the vdas can talk to any so they coudl cross if needed,  To do that you need to use spaces in the GPOs to keep all the FAS servers having the same ID.  So o n one side fas1, fas2 space, space ands the other side space, space fas3 and fas4 then the vdas get fas1m fas2, fas3, fas4

Michael has a good explanation here <https://www.ferroquesystems.com/resource/howto-active-active-multi-datacenter-citrix-fas/>

Nice one, Rob. I'll have a read :slightly_smiling_face:

We are uploaded a .vmdx image up to Azure using the Image Portability Service scripts. We are trying to run the "Prepare" script and have a failure in the script "LocationId {Citrix Cloud Resource Location ID} not available." We have verified the ID is correct in the script, but it fails at that point.

I am taking over the project from another engineer and the image has already been uploaded to Azure. I do not know if the Export process was done first. Would the image upload properly if they had not run the Export scripts first?

...And Hey Rob! It's good to chat with you and thanks for responding to my question!

Do you have a connector appliance deployed in that resource location?  That is what the script is actually looking for base don the id.

Hmm, I’m not sure about the connector appliance. There are Cloud Connector Servers running in Azure. Will the script run correctly with those?

<https://docs.citrix.com/en-us/citrix-daas/migrate-workloads.html>

Long story short setup this
• Connector appliances in both locations( Not the Windows one)
• Citrix api setup in daas
• Poweshell script sdk installed on a machine you be using
• You will need a file share in both locations
• Export the vmdk and convert it to the destination format. 
I have not done it 100%, only been learning this still. Not a expert in any way lol.

Same links Rob posted but here is another one.


<https://support.citrix.com/article/CTX460110/how-to-configure-image-portability-service-to-migrate-an-image-to-azure-cloud>

so first export then upload then prepare then publish (if using pvs)

Thank you <@UK6S90JDR> and <@UL5TCSW3D> for checking. Sorry for delay in reply

I think may be due to Antivirus. Please feel free to share if you have any other suggestions

Have you got the required exclusions in place?

<@UL5TCSW3D>, Yea James, i have already asked  Antivirus to look into it,, Any other suggestion you would like to share ?

The logs would tell us better why a profile is not being created. The screenshot you have shared could be a red herring

Thank you James for your reply. Actually screenshot which i shared is of UPM logs

But what I can see there is not relevant to the logon issue. Ideally we would need to see the entire logon process for a problem user

Got it James. Let my try to grab entire logs.. issue is with most the users