Hotfix readme name: AACE400W004.HTM
Hotfix package name: AAC400W004.EXE
For: Advanced Access Control 4.0
Replaces: AAC400W001, AAC400W003
Date: November, 2006
Languages supported: English (US), French, German, Japanese, Spanish
Readme version: 1.0
Note: You can apply this hotfix only to computers running Advanced Access Control 4.0, also known as Access Gateway Enterprise 4.0.
Where to Find Documentation
This document describes the issues solved by this hotfix and includes installation instructions. You can find more information about Citrix Advanced Access Control 4.0 (also known as Citrix Access Gateway Enterprise 4.0) in the Citrix Access Gateway Enterprise Administrator's Guide. The guide is in the \Documentation directory on the Citrix Access Gateway Enterprise Server CD. All product documentation is also available from the Citrix Web site at http://www.citrix.com/support.
The Citrix Access Gateway Enterprise Administrator's Guide is in an Adobe Portable Document (PDF) format file. To view, search, and print the documentation, you need Adobe Reader 5 or later. You can download the Reader for free from the Adobe Web site at http://www.adobe.com/.
Known Issue(s) in this Release
• Do not interrupt the install/uninstall process of this hotfix by clicking Cancel. Interrupting the process prevents a clean rollback and leaves your original installation corrupted.
• You must apply this hotfix to all servers, including Management Console only systems.
• You may be prompted for your Advanced Access Control 4.0 CD when attempting to install or uninstall this hotfix. The issue is caused by unversioned files that were part of the original installation that may not have been cached. If this happens, without canceling the uninstall process, point to the location and click OK to continue.
• Silent installation of this hotfix is not supported.
Issue(s) Resolved in this Hotfix
1. Citrix Smart Access with the Web Interface has been added to Access Gateway Enterprise so that you can control user access to available Presentation Server applications through the use of policies and filters. This allows, for example, the use of endpoint analysis as a condition for application access. This functionality is achieved by integrating the Access Gateway Enterprise Logon Agent components with the Web Interface and Presentation Server. This provides advanced authentication and access control options to the Web Interface using logon points. For more information about Smart Access with the Web Interface, see the Citrix Smart Access with the Web Interface Administrator's Guide located in the hotfix installation directory or on the Citrix Web site (CTX107053).
This is the server component of the feature enhancement. To get the full feature enhancement, Citrix recommends that you also install console Hotfix ASC400W001 (CTX107174) and upgrade to Version 4.1 of the Web Interface (CTX107053).
[From AAC400W001][#112769]
2. Session data can be sent in the form of browser cookies to third party Web sites when using the Web proxy.
[From AAC400W003][#95586]
3. On occasion, new access centers fail to be created after clicking Finish in the New Access Center wizard, and the following error message appears:
"Action unable to be completed." This occurs because of a code dependency on the existence of a "Guest" NT account. If the Guest NT account is renamed either on the local computer or elsewhere in the domain, the creation of new access centers fails.
[From AAC400W003][#121540]
4. After installing Version 4.0 of the product, attempting to authenticate using a domain account fails and the following error message appears:
"An internal system error has been detected. Please contact your system administrator." Attempting to authenticate to the same logon point using a local account works without errors. This occurs because the logon agent queries all Active Directory groups when users log on. These queries can be very time consuming depending on the number and size of the Active Directory groups. This fix corrects the issue in that the agent now only queries the relevant Active Directory groups.
[From AAC400W003][#122078]
5. This fix introduces a usability enhancement for Access Centers when asked to enter the old password after a password reset by an administrator. Users will have the option to reset their profile configuration for the Access Center if they do not recall their old password. Their personalized settings and cached credentials are discarded.
After installation, import the updated Access Center CDA cab file on the server running Citrix Advanced Access Control. To do this:
A. In the Access Suite Console, right click Access Centers and select Manage CDAs.
B. Select Import and browse to Program Files\Citrix\Access Gateway\Bin\ctxcdaSessionInit.cab and then press Open.
[From AAC400W003][#122742]
6. Loading a logon point logon page after installing Hotfix 1 (AAC400W001.msp) fails if the base product is installed on a drive other than C:.
[From AAC400W003][#124032]
7. When using the migration tool (Msam2xMigration.exe) to migrate multiple access centers with identical folder and file structures, the migration of all but the initial access center fails.
[From AAC400W003][#125961]
8. Migrating Web Part configuration information from Secure Access Manager 2.x may fail.
[From AAC400W003][#126715]
9. Internet Explorer exits unexpectedly if more than one instance of the Website Viewer CDA is present on the same page and more than one instance requires NTLM authentication.
[From AAC400W003][#126877]
10. After migrating an access center from Secure Access Manager 2.x, the original placement of CDAs in the page layout may no longer be honored.
[From AAC400W003][#127822]
11. When migrating from MSAM2.x, certain CDAs may fail to import.
[From AAC400W003][#128251]
12. After applying this fix, users are required to enter their old password when prompted to gain access to the access center and cannot bypass this screen using the browser's back button.
[From AAC400W003][#129893]
13. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX111614.
[From AAC400W004][#139539]
14. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX111615.
[From AAC400W004][#140095]
Installing and Uninstalling this Hotfix
Notes:
• This hotfix is packaged with Microsoft Windows Installer 3.0. For more information about deploying these, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.
• This hotfix may or may not prompt you to restart the server when the installation or uninstallation is complete. If you are using the Access Suite Console, you must restart the server after installing or uninstalling this hotfix to ensure that the hotfix is added to or removed from the console's hotfix inventory list.
To install this hotfix:
1. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.
2. Close all applications.
3. Run the executable.
4. Restart the server.
5. If you are using the Access Suite Console, restart the server to ensure the hotfix is added to the console's hotfix inventory list.
To uninstall this hotfix:
1. From the Start menu, select Settings > Control Panel.
2. In Control Panel, double-click Add/Remove Programs.
3. Highlight the hotfix you want to uninstall and click Remove.
4. Follow the directions on-screen.
5. If you are using the Access Suite Console, restart the server to ensure the hotfix is removed from the console's hotfix inventory list.
Files Updated
Server binaries
CDS.dll | 315,392 | 10/24/2006 | 01:08p |
Citrix.AuthenticationService.dll | 118,784 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.dll | 32,768 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.TLB | 4,740 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.UniversalBroker.dll | 24,576 | 09/26/2006 | 11:34p |
Citrix.Common.System.dll | 143,360 | 09/26/2006 | 11:10p |
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll | 49,152 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.TLB | 10,408 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll | 1,191,936 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.WebProxyManager.dll | 28,672 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.WebProxyManager.TLB | 10,340 | 09/26/2006 | 11:15p |
Citrix.Msam.Installation.Migration.Helper.dll | 32,768 | 09/27/2006 | 12:16a |
Citrix.Msam.Installation.Migration.Processor.dll | 73,728 | 09/27/2006 | 12:16a |
Citrix.Msam.Installation.Migration.Util.dll | 9,728 | 09/27/2006 | 12:16a |
Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll | 32,768 | 09/26/2006 | 11:33p |
Citrix.Msam.ServerConfig.Common.dll | 274,432 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.dll | 159,744 | 09/27/2006 | 12:16a |
Citrix.Msam.SessionInit.dll | 53,248 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.dll | 49,152 | 09/26/2006 | 11:14p |
Citrix.Msam.SessionManagement.Server.TLB | 6,532 | 09/26/2006 | 11:14p |
Citrix.SECURITYBROKERLib.dll | 14,848 | 09/26/2006 | 11:20p |
CPatch.exe | 28,672 | 10/05/2006 | 11:13a |
ctxcdaSessionInit.CAB | 45,829 | 09/27/2006 | 12:25a |
ctxcdaWebViewer.CAB | 460,805 | 09/27/2006 | 12:25a |
CtxCustomActions.dll | 126,976 | 09/27/2006 | 12:13a |
CtxUpdateCustomActions.dll | 376,832 | 09/27/2006 | 12:20a |
CtxUpdateUtility.exe | 49,152 | 09/27/2006 | 12:20a |
FEI.cab | 358,690 | 09/27/2006 | 12:28a |
MsamAccessObjectsLibrary.dll | 909,312 | 09/26/2006 | 11:12p |
policy.4.0.Citrix.AuthenticationService.Config | 423 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.AuthenticationService.dll | 3,584 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.AuthenticationService.Server.Config | 430 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.AuthenticationService.Server.dll | 3,584 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.AuthenticationService.UniversalBroker.Config | 439 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.AuthenticationService.UniversalBroker.dll | 3,584 | 09/26/2006 | 11:34p |
policy.4.0.Citrix.Common.System.Config | 415 | 09/26/2006 | 11:10p |
policy.4.0.Citrix.Common.System.dll | 3,072 | 09/26/2006 | 11:10p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.Config | 446 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll | 4,096 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.InitializationManager.Config | 448 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll | 4,096 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.WebProxyManager.Config | 442 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.WebProxyManager.dll | 3,584 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Installation.Migration.Helper.Config | 436 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Installation.Migration.Helper.dll | 3,584 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Installation.Migration.Processor.Config | 439 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Installation.Migration.Processor.dll | 3,584 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Installation.Migration.Util.Config | 434 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Installation.Migration.Util.dll | 3,584 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.Config | 451 | 09/26/2006 | 11:33p |
policy.4.0.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll | 4,096 | 09/26/2006 | 11:33p |
policy.4.0.Citrix.Msam.ServerConfig.Common.Config | 426 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.ServerConfig.Common.dll | 3,584 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.ServerConfig.WizardControl.Config | 433 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.ServerConfig.WizardControl.dll | 3,584 | 09/27/2006 | 12:16a |
policy.4.0.Citrix.Msam.SessionInit.Config | 418 | 09/27/2006 | 12:01a |
policy.4.0.Citrix.Msam.SessionInit.dll | 3,584 | 09/27/2006 | 12:01a |
policy.4.0.Citrix.Msam.SessionManagement.Server.Config | 431 | 09/26/2006 | 11:14p |
policy.4.0.Citrix.Msam.SessionManagement.Server.dll | 3,584 | 09/26/2006 | 11:14p |
policy.4.0.Citrix.SECURITYBROKERLib.Config | 419 | 09/26/2006 | 11:20p |
policy.4.0.Citrix.SECURITYBROKERLib.dll | 3,584 | 09/26/2006 | 11:20p |
policy.4.0.MsamAccessObjectsLibrary.Config | 419 | 09/26/2006 | 11:12p |
policy.4.0.MsamAccessObjectsLibrary.dll | 3,584 | 09/26/2006 | 11:12p |
sbSessionInit_de.dll | 6,144 | 10/24/2006 | 12:14p |
sbSessionInit_en.dll | 5,632 | 10/24/2006 | 12:14p |
sbSessionInit_es.dll | 6,144 | 10/24/2006 | 12:14p |
sbSessionInit_fr.dll | 6,656 | 10/24/2006 | 12:14p |
sbSessionInit_ja.dll | 5,120 | 10/24/2006 | 12:14p |
SecurityBroker.dll | 122,880 | 10/24/2006 | 01:08p |
WebProxy.dll | 229,376 | 10/24/2006 | 01:08p |
For US:
Citrix.AuthenticationService.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.Msam.ServerConfig.Common.resources.dll | 167,936 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.resources.dll | 135,168 | 09/27/2006 | 12:17a |
Citrix.Msam.SessionInit.resources.dll | 6,656 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.resources.dll | 4,608 | 09/26/2006 | 11:14p |
CpatchUI.dll | 6,144 | 10/05/2006 | 10:20a |
For DE:
Citrix.AuthenticationService.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.Msam.ServerConfig.Common.resources.dll | 143,360 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.resources.dll | 77,824 | 09/27/2006 | 12:16a |
Citrix.Msam.SessionInit.resources.dll | 6,656 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.resources.dll | 4,608 | 09/26/2006 | 11:14p |
CpatchUI.dll | 6,656 | 10/05/2006 | 11:15a |
For ES:
Citrix.AuthenticationService.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.Msam.ServerConfig.Common.resources.dll | 143,360 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.resources.dll | 73,728 | 09/27/2006 | 12:17a |
Citrix.Msam.SessionInit.resources.dll | 6,656 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.resources.dll | 4,608 | 09/26/2006 | 11:14p |
CpatchUI.dll | 6,656 | 10/05/2006 | 11:20a |
For FR:
Citrix.AuthenticationService.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.Msam.ServerConfig.Common.resources.dll | 147,456 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.resources.dll | 77,824 | 09/27/2006 | 12:17a |
Citrix.Msam.SessionInit.resources.dll | 7,168 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.resources.dll | 5,120 | 09/26/2006 | 11:14p |
CpatchUI.dll | 6,656 | 10/05/2006 | 11:18a |
For JA:
Citrix.AuthenticationService.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.AuthenticationService.Server.resources.dll | 5,120 | 09/26/2006 | 11:34p |
Citrix.Msam.ServerConfig.Common.resources.dll | 147,456 | 09/27/2006 | 12:16a |
Citrix.Msam.ServerConfig.WizardControl.resources.dll | 73,728 | 09/27/2006 | 12:17a |
Citrix.Msam.SessionInit.resources.dll | 7,168 | 09/27/2006 | 12:01a |
Citrix.Msam.SessionManagement.Server.resources.dll | 5,120 | 09/26/2006 | 11:14p |
CpatchUI.dll | 5,632 | 10/05/2006 | 11:17a |
Console binaries
Citrix.Common.System.dll | 143,360 | 09/26/2006 | 11:10p |
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll | 49,152 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.TLB | 10,408 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll | 1,191,936 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.WebProxyManager.dll | 28,672 | 09/26/2006 | 11:15p |
Citrix.Msam.Amc.BusinessObjects.WebProxyManager.TLB | 10,340 | 09/26/2006 | 11:15p |
Citrix.SECURITYBROKERLib.dll | 14,848 | 09/26/2006 | 11:20p |
CollapsiblePanelBar.dll | 65,536 | 05/15/2005 | 08:45p |
CPatch.exe | 28,672 | 10/05/2006 | 11:13a |
CtxCustomActions.dll | 126,976 | 09/27/2006 | 12:13a |
CtxUpdateCustomActions.dll | 376,832 | 09/27/2006 | 12:20a |
CtxUpdateUtility.exe | 49,152 | 09/27/2006 | 12:20a |
MsamAccessObjectsLibrary.dll | 909,312 | 09/26/2006 | 11:12p |
policy.4.0.Citrix.Common.System.Config | 415 | 09/26/2006 | 11:10p |
policy.4.0.Citrix.Common.System.dll | 3,072 | 09/26/2006 | 11:10p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.Config | 446 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll | 4,096 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.InitializationManager.Config | 448 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll | 4,096 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.WebProxyManager.Config | 442 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.Msam.Amc.BusinessObjects.WebProxyManager.dll | 3,584 | 09/26/2006 | 11:15p |
policy.4.0.Citrix.SECURITYBROKERLib.Config | 419 | 09/26/2006 | 11:20p |
policy.4.0.Citrix.SECURITYBROKERLib.dll | 3,584 | 09/26/2006 | 11:20p |
policy.4.0.MsamAccessObjectsLibrary.Config | 419 | 09/26/2006 | 11:12p |
policy.4.0.MsamAccessObjectsLibrary.dll | 3,584 | 09/26/2006 | 11:12p |
For US:
CpatchUI.dll | 6,144 | 10/05/2006 | 10:20a |
For DE:
CpatchUI.dll | 6,656 | 10/05/2006 | 11:15a |
For ES:
CpatchUI.dll | 6,656 | 10/05/2006 | 11:20a |
For FR:
CpatchUI.dll | 6,656 | 10/05/2006 | 11:18a |
For JA:
CpatchUI.dll | 5,632 | 10/05/2006 | 11:17a |
Copyright © 2006 Citrix Systems, Inc. All rights reserved.
Citrix, MetaFrame, and MetaFrame XP are registered trademarks, and Citrix Presentation Server is a trademark of Citrix Systems, Inc. in the United States and other countries.
All other trademarks and registered trademarks are the property of their respective owners.
