[FAS 7.15 LTSR CU5]- VDA is asking for credential when using SAML and FAS

[FAS 7.15 LTSR CU5]- VDA is asking for credential when using SAML and FAS

book

Article ID: CTX270224

calendar_today

Updated On:

Description

[FAS 7.15 LTSR Cu1]- VDA is asking for credential when using SAML and FAS  Error Message.

The username or password is incorrect

[1]0454.0458::02/05/20-11:23:53.3585920 [] [CiImageVerificationFailureActivityStart]
[1]0454.0458::02/05/20-11:23:53.3585928 [] [CiTraceImageVerificationFailureGenericInfo] Options=0x6, DeveloperOptions=0x40008, FileName=\Device\HarddiskVolume3\Program Files (x86)\Citrix\System32\ctxauth.dll, ProcesseName=\Device\HarddiskVolume3\Windows\System32\lsass.exe, SecureRequiredFlags=0x80000000, RequestedSigningLevel=1, FileHash.Count=20, FileHash, AllowedToLoad=false, GenericVerificationError=0x0, NumberOfSignatures=2
[1]0454.0458::02/05/20-11:23:53.3585962 [] [CiTraceSignatureVerificationFailure] VerificationError=0x7, ValidatedSigningLevel=4, CertTBS.Count=32, CertTBS, IssuerName=DigiCert SHA2 Assured ID Code Signing CA, PolicyFlags=0x8, RequiresWHQLFlag=false
[1]0454.0458::02/05/20-11:23:53.3585975 [] [CiTraceSignatureVerificationFailure] VerificationError=0x7, ValidatedSigningLevel=4, CertTBS.Count=32, CertTBS, IssuerName=DigiCert SHA2 Assured ID Code Signing CA, PolicyFlags=0x8, RequiresWHQLFlag=false
[1]0454.0458::02/05/20-11:23:53.3585984 [] [CiImageVerificationFailureActivityStop]
[1]0454.0458::02/05/20-11:23:53.3586022 [] Code Integrity completed validating image header. Status 0xC0000428. ----------------------- STATUS_INVALID_IMAGE_HASH
 

Resolution

Requested customer to upgrade their VDA to 1912 where CtxAuth.dll is signed with Microsoft and Citrix. 

Problem Cause

LSA protection  was enabled and it was not loading CtxAuth.dll  as LSA was looking for Microsoft Signed Dll.