Has anyone encountered this FAS error before? Event ID 102 and Windows 11 prompts the user for credentials when launching the published desktop. [S102] Identity Assertion Logon failed. Could not lookup SID for UserName@company.com [Exception: A device attached to the system is not functioning. at System.Security.Principal.WindowsIdentity.KerbS4ULogon(String upn, SafeAccessTokenHandle& safeTokenHandle) at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName, String type) at System.Security.Principal.WindowsIdentity..ctor(String sUserPrincipalName) at Citrix.Authentication.IdentityAssertion.HdxCredentialSelector.<>c__DisplayClass25_0.<QueryLogonMethod>b__0()] The handle is invalid Only happening for new Windows 11 VDI desktops.

FAS version?

FAS 2308. I have a change planned to upgrade to 2407 early next week. But I don't see anything in the release notes that I expect to help me. The VDA was 2402 CU1, but I upgraded it to 2407 to see if it did anything different. It didn't, but I am seeing a couple new errors in the event viewer. Event ID 57's CertificateServicesClient-CertEnroll The "CitrixVirtualSmartcardKsp" provider was not loaded because initialization failed. The "CitrixLogonKsp" provider was not loaded because initialization failed. I have also discovered my desktop/Xen guys really want to use the Windows 11 LTSC version. I don't see Windows 11 LTSC listed as a supported operating system and will advise them to replace this machine with 23H2 or 24H2 for testing.

Didn't even know that W11 LTSC exists 😁

Returning to this problem, I had the desktop team try Windows 11 Enterprise 24H2. They encountered the same problem as they did with the LTSR release. This makes sense to me since the LTSR release is based upon 24H2. Off to Citrix Support I go and a caution to those who run FAS and are looking to deploy 24H2.