Looking for advice, we found that the very first u...
# citrix-wemf
François-Xavier Rigaud
04/01/2025, 9:06 PMLooking for advice, we found that the very first user to log on to a server after it has been rebooted has a much longer logon sequence of several tens of seconds at "Please wait for the Citrix WEM User Logon Service". Users who log on afterwards are not affected.
s
Sharp Guo
04/03/2025, 5:25 AMNo-persist or persist environment? Have you enabled the cache for WEM?
Sharp Guo
04/03/2025, 5:27 AMif the cache is enabled, please refer to the blog for your configuration. it's better to Choose a Persistent Location for Agent Cache : Improve Environment Stability and Performance with WEM Agent Caching - Citrix Blogs
m
Matt Sliva
04/03/2025, 3:56 PMI encountered this when WEM couldn't reach public certificate revocation lists over the Internet.
f
François-Xavier Rigaud
04/03/2025, 4:09 PM@Sharp Guo Non-persistent W2022, cache is enabled (offline mode + accelerate)
François-Xavier Rigaud
04/03/2025, 4:11 PM@Matt Sliva Thanks, I'll take a look
m
Matt Sliva
04/03/2025, 4:16 PMIt was procmon that showed excessive TCP retransmits. Citrix support identified an IP and I took it from there. I had my security team open up these IPs, as well as a few others, and the problem disappeared. Also disabling the WEM User Logon Service made the problem go away. That wasn't an option for me because the service processes WEM group policy actions.
https://knowledge.digicert.com/alerts/new-dedicated-ip-addresses
f
François-Xavier Rigaud
04/03/2025, 4:46 PMNot an option to disable this service (logoff actions).
François-Xavier Rigaud
04/03/2025, 4:54 PMIt might be complicated - the only way we can get out to the Internet is through a proxy.
m
Matt Sliva
04/03/2025, 4:55 PMThat was my scenario. The proxy was a per-user setting. I worked with my security team to allow an exception on the outbound firewall.
Matt Sliva
04/03/2025, 4:55 PMTo test the theory, you can use netsh to set a system wide proxy.
f
François-Xavier Rigaud
04/03/2025, 4:56 PMAffirmative, thanks a lot for these suggestions
François-Xavier Rigaud
04/03/2025, 9:05 PMIt was the same problem you ran into. Fixed by modifying the Citrix.Wem.Agent.LogonService.exe.config file to add generatePublisherEvidence to false. That did the trick and got rid of the logon delay.
m
Matt Sliva
04/03/2025, 9:07 PMHey good find! I really wish this problem or at least the dependency was documented somewhere.
f
François-Xavier Rigaud
04/03/2025, 9:10 PMThank you again for helping to identify this. Have a good day/night 🙂
2 Views