After a new installation of XenApp 6.5 while running the XenApp Server Configuration the Citrix IMA Service fails to start.

The log shows only the following messages:

The registry key DataSourceName under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\IMA was blank, however trying to manually populate does not help since the XenApp Server Configuration clears it again.

The registry key  CurrentlyLoadingPlugin under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\IMA\RUNTIME had the value MfSrvSs.dll.
The event viewer logs reported that the ICA listener was disabled.

All Windows update fixes are applied and a check on updated root certificates is included. Repair of the XenApp Installation done but service still fails.

Complete the following steps to resolve the issue:

2. Complete Workaround 2 from CTX129998 - Hotfix Installation Fails if the Update Root Certificates Feature in Windows Server 2008 Cannot Automatically Update the Root Certificates.

3. Download the root package from Download Primary PCA Root Certificates.
   And then the digital signature of rpm.dll is ok and repeating the installation and configuration of XenApp 6.5 finishes correctly with the IMA service starting.

Problem Cause

Failure in the validation of the digital signature of the file RPM.dll. While initializing the MFSRVSS.DLL, it enumerates the listeners and verifies the signature of RPM.dll, this task fails, thus causing the IMA startup failure.

This was determined in a CDF trace collected while running the XenApp Server Configuration:

ImaShimProductAdapter::VerifyCtxICASupport - Entered. ImaShimProductAdapter::
CtxWSEnumerateListeners - Entered.ImaShimProductAdapter::CtxWSEnumerateListeners - Exiting, 
result = TRUE ImaShimProductAdapter::VerifyCtxICASupport - Listener Name = ICA-TCP.
Adapter Name = <NULL>. File Location = C:\Program Files (x86)\Citrix\System32\rpm.dll.ImaShimProductAdapter::
VerifyCtxICASupport: Listener failed Authenticode signature verificationImaShimProductAdapter::VerifyCtxICASupport - 
Exiting. bICASupported = FALSE IMA_MFServer::NotifySubsystem - ICA is not supported on this 
machine. Returning IMA_RESULT_FAILURE(1)

And checking the File properties of rpm.dll shows the following message:

But the following had to be displayed:

CTX129998 - Hotfix Installation Fails if the Update Root Certificates Feature in Windows Server 2008 Cannot Automatically Update the Root Certificates
CTX105292 - Troubleshooting IMA Service Faliure To Start
Certificate Support and Resulting Internet Communication in Windows Server 2008
Citrix Discussion - IMA Failed to start