Error message on SecureHub while accessing WorxStore "Your sign on has expired. Please sign on again to continue.". Screenshot below.

Note: This is affecting both iOS and Android users.

Error Message in SecureHub Logs

"Secure Hub","WARNING ( 3)","AuthControllerImpl:getKeyManager is going to return null because the prerequisites were not met",1889,2066,Secure Hub, , ,0

This software application is provided to you as is with no representations, warranties or conditions of any kind. You may use and distribute it at your own risk. CITRIX DISCLAIMS ALL WARRANTIES WHATSOEVER, EXPRESS, IMPLIED, WRITTEN, ORAL OR STATUTORY, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NONINFRINGEMENT. Without limiting the generality of the foregoing, you acknowledge and agree that: (a) the software application may exhibit errors, design flaws or other problems, possibly resulting in loss of data or damage to property; (b) it may not be possible to make the software application fully functional; and (c) Citrix may, without notice or liability to you, cease to make available the current version and/or any future versions of the software application. In no event should the software application be used to support ultra-hazardous activities, including but not limited to life support or blasting activities. NEITHER CITRIX NOR ITS AFFILIATES OR AGENTS WILL BE LIABLE, UNDER BREACH OF CONTRACT OR ANY OTHER THEORY OF LIABILITY, FOR ANY DAMAGES WHATSOEVER ARISING FROM USE OF THE SOFTWARE APPLICATION, INCLUDING WITHOUT LIMITATION DIRECT, SPECIAL, INCIDENTAL, PUNITIVE, CONSEQUENTIAL OR OTHER DAMAGES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. You agree to indemnify and defend Citrix against any and all claims arising from your use, modification or distribution of the software application.

Below are the steps which needs to be checked to resolve this issue.

1. Check the "Domain Alias" in the XenMobile LDAP configuration settings page.
2. Add to the allowed domains under "Configure Domains for Clientless access" on the NetScaler.
3. If changes are made on the NetScaler, then validate that the MAM load balanced server is using port 8443, if not create it. When the XenMobile wizard is used, it will look like _XM_MAM_LB_IP_Address_8443, the protocol used is SSL.
4. Under DNS -> A Record. Validate that this IP resolves the XenMobile server as only the NetScaler knows about this IP.
5.   Verify the XenMobile server host name. If <MDM.domain.com> is used then rebuild the XenMobile server from the scratch with the all small FQDN as <mdm.domain.com>. This is a known issue with XenMobile server.
6. Ensure that the correct XenMobile FQDN is used on the allowed domains section in the Configure Clientless Access Profile section on NetScaler.

Users are reporting "Your sign on has expired. Please sign on again to continue." when trying to access XenMobile Store.