Storefront: There are no apps and desktops available to you at this time

- Event logs [ID: 4012]: None of the Citrix XML Services configured for farm [] are in the list of active services, so none were contacted.

## We first identify the Certificate Thumbnail of the newly installed Certificates 

• On the DDC where the newly installed (Open Powershell & Run: Posh:> Get-ChildItem -path Cert:\Localmachine\CA | Select-Object Subject, Thumbprint )

## We need to identify the appID for the Broker Service

- Under regedit: [ HLKM\Software\Microsoft\Windows\CurrentVersion\Uninstall\[GUID} ]

- Appid for CVAD 2203 {80EF19EA-BC65-4DAA-B241-F6A68C702A94}

## We need the IP address of each DDC

-Posh:> ipconfig /all

## Here is the SSL binding command (It doesnt work in Powershell, only works in CMD)

## Example Without any value

CMD:> netsh http add sslcert ipport=<IP address>:<Port Number> certhash=<Certificate Hash Number> appid="{<Citrix Broker Service GUID>}"

##Example with values

CMD:> netsh http add sslcert ipport=192.168.1.12:443 certhash=a78cf77fcae267428e4f5549a0e084fbe2742e0b appid={5C3459BD-99D7-1214-A9C1-33009D2704AF}

Problem Cause

Even if a Certificate is install on the DDC (It does not mean it has been bound properly to replace the old Certificate)

• If you have installed  / use IISManager > Site > SiteName > Bindings [ Bind the New Certifcate ]
• You will not need to use the netsh command (however, if you do not have installed / use IISManager, you will need to perform this extra step, command above)