1. After installing RSA authentication agent 7.4.3 software on a 2016 VDA with 7.15 CU4  the desktops won't launch anymore, it shows Please wait for the local session manager screen.

2. Also seen the similar behavior with application stuck at launch at spinning wheel at progress bar and never launches when we have AD + RSA authentication type being used, No matters if RSA software is installed on VDA or not.

For first scenario if we remove the software it works again in case there is no other way we are using RSA authentication.

Behavior with different product combinations-
Windows server 2016 + Citrix VDA = Works fine, no issues with RDP or ICA
Windows server 2016 + Citrix VDA + RSA Software = RDP and Citrix both fails
Windows server 2016 + Citrix VDA + RSA Software + DisableLogonUISuppression=0 = RDP and Citrix both fails

For both the scenarios, app launch works with following combination :

Windows server 2016 + Citrix VDA + RSA Software/ RSA Authentication type + DisableLogonUISuppression=1 = Citrix works but RDP still fails intermittently.

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

As per Citrix document : https://support.citrix.com/article/CTX225819

DisableLogonUISuppression key should be set to 0 and it is applicable for the combination of Citrix with Windows server 2016.

Not all applications are same and works same way when combines with other apps and that is what we are seeing in case of RSA.

Hence in RSA article : https://community.rsa.com/docs/DOC-101529

It is clearly mentioned that RSA needs LogonUI not to be suppressed and that is what we are achieving by setting this key to 1.

---

Problem Cause

RSA needs LogonUI not to be suppressed and that is what we are achieving by setting this key to 1.

https://community.rsa.com/docs/DOC-101529