Error "The system is currently unavailable" while logging into Citrix Director with smart card

Error "The system is currently unavailable" while logging into Citrix Director with smart card

book

Article ID: CTX630130

calendar_today

Updated On:

Description

  • You get the Error "The system is currently unavailable. Please try again later or contact your administrator." while logging into Citrix Director with smart card. The issue is not seen when logging in via username and password.

 

 

  • Dmc Service error Citrix.Dmc.Common.ConfigurationException: No sites could be accessed is seen in Director IIS and CDF logs.

Environment

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

Resolution

Fix or remove the broken/unresolved SID in the "Impersonate a client after authentication" group policy. 


Problem Cause

 
There was a broken/unresolved SID in "Impersonate a client after authentication" Group Policy under Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment 

Issue/Introduction

This article describes the smart card logon failure scenario for Citrix Director

Additional Information

In most cases, this configuration has no impact. However, if you have installed optional components such as ASP.NET or IIS, you may need to assign the Impersonate a client after authentication user right to additional accounts that are required by those components, such as IUSR_<ComputerName>, IIS_WPG, ASP.NET, or IWAM_<ComputerName>.

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/security-policy-settings/impersonate-a-client-after-authentication

https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/install-and-configure/configure-smart-card.html

https://www.citrix.com/blogs/2021/01/13/citrix-tips-piv-key-smart-card-auth-for-citrix-director/