odd fix, in combination with the latest administration firmware update , had to add VPX using http, instead of https (not great security). I've not seen this before. TLS certs were removed on the update from 13.1.49.15 to 13.1.62.23 , and we were unable to install them back in freemium mode, I think this is expected,. however, the related docs from Citrix don't have any notes on this odd catch 22. I'll reach out to the PM for ADM

Thanks for sharing !

I think when it drops to freemium it disables SSL

Yeah, correct, creates a catch-22. Another guy at work provided another work-around (not documented by CTX, AFAIK) delete expired .lic, reboot to enter freemium, TLS cert bindings / existing NS config should remain in place to allow for LAS provision by normal ADM console process via HTTPS, not HTTP. I don't know the product owner for ADM console for citrix, else, i'd tag them on this thread

The whole situation is more complicated for MPX, as there is no freemium mode.

so freemium allows for SSL but what happens when it reboots and can't find a license at all is that it disables features and also strips certs from from the config over 512 bits (which is basically everything these days). It's a known issue: https://support.citrix.com/external/article/CTX200421/configuration-loss-after-reboot-when-net.html

freemium!

Losing the license on MPX, get conf wiped, no HTTPS access is non-sense and I don't get why it just doesn't move to freemium to limit the bandwidth and that's it.

Agreed, super frustrating for a previously simple operation. My employer is a CSP partner, so, we've got some path to raise our concerns to Citrix. I'll let ya'll know how it goes once I've met with them. The 'power of community' is great, but, they need to update their KBs for those folks not on X/Citrix forms/World of EUC slack

I'll raise it on my side too, large customer here, power in the number! We will probably be asked to raise a RFE