Important: After you receive an extension
An extension is provided as a one-time-only exception to allow continued use of file-based licensing for a limited period. Customers must migrate to License Activation Service (LAS) before the extension expiration date to avoid service disruption.
Step 1: Setting up / Review your Citrix Cloud account
To activate and use the License Activation Service (LAS), you need a Citrix Cloud account. Having a Citrix Cloud account also allows you to temporarily suspend LAS enforcement to download extension files. All Citrix customers with current entitlements can create Citrix Cloud accounts. For instructions on setting up an account, visit https://docs.citrix.com/en-us/citrix-cloud/overview/signing-up-for-citrix-cloud/account-management#create-a-citrix-cloud-account.
IMPORTANT: Citrix Cloud deployments in Japan (JP) and Government (CCG) do NOT support the one-time extension. Ensure that a cloud account in US, EU OR AP-S control planes. Customers can create new cloud accounts in different control planes as needed.
Step 2: Downloading License Files from MyAccount
As part of the one-time extension, new license files will be made available in the Citrix → MyAccount (https://www.citrix.com/account). Existing administrators should already be familiar with the process of downloading license files. More information can be found in the product documentation: https://docs.citrix.com/en-us/licensing/current-release/manage-licenses-myaccount.html#to-access-manage-licenses-on-citrixcom.
IMPORTANT: To get new expiration dates, administrators need to return and allocate licenses. Redownloading licenses files will not refresh the expiration dates.

Step 3a: Citrix LS based deployments (CVAD / XS / XM etc.)

2. On the Generate license file extension page, select the Citrix component and enter the hostname/host ID, then select Generate file.

Note: Do not enter FQDN in the hostname.
3. Select Download to download the license file extension blob.

Citrix License Server
There are two supported methods to apply the license file extension blob:
Option 1: Use the Automated Tool (Recommended)
Citrix provides a supported utility that automates the application of the license file extension blob. This method is documented in CTX696542.
Using the tool is the recommended approach, as it reduces the risk of errors and ensures consistent application of the license file extension.
Refer to CTX696542 for detailed instructions on downloading and using the tool.
Option 2: Apply the License File Extension Blob Manually
Alternatively, the license file extension blob can be applied manually by following the following steps.
1. (Optional step) Go to license server and check the current deadline)
2. Go to License Server and Backup the existing "legacylicenseextension.blob" -file present in C:\Program Files (x86)\Citrix\licensing\MyFiles
Note: This is the default License server installed directory, if you have installed the license server at a custom directory, follow the custom directory path.
3. Unzip the license file extension blob and place the extracted “legacylicenseextension.blob” at C:\Program Files (x86)\Citrix\licensing\MyFiles\
4. If customers current license files have 15th April 2026 as the expiry date, they can download the latest license files from Citrix MyAccount which will have updated expiry date according to the end date of the exception approval. Upload those license files to License server. Verify the new dates in the studio.
5. Restart the “Citrix Licensing” service
(Optional step) Validate the extension date:
To validate the extension: (This can be done before and after placing the blob to see the current deadline and revised deadline)
6. Open the log file present at the location C:\Program Files (x86)\Citrix\Licensing\LS\Logs\log_vdxudlic.log
7. Find the last instance of following lines at the end of the file:(these lines could be present multiple times)
a. Parsed CutOffTime := <timestamp> from output
b. Cutoff timestamp <timestamp> not reached, no need to perform inventory and checkout
8. The <timestamp> is in epoch seconds. Use the following tool to convert it to actual date and time: https://www.epochconverter.com. The new date will match with the approved exception end date.
9. Verify the new entitlement end date in Studio.
Note:
1. If the customer is on non-LAS supported license server and has applied the extension file, it is necessary to upgrade to a LAS-supported License Server version. Upon completion of the upgrade, the extension files may be overwritten, requiring the customer to reapply the extension files. To mitigate the risk of unexpected downtime, it is recommended to schedule a maintenance window and back up the extension files prior to upgrading. After the License Server upgrades, restore or reapply the extension files as appropriate.
2. LS version 51000 does not log the Cutoff timestamp, and it's recommended to be on LS 53100 and above to verify the updated cutoff timestamp after applying the extension blob.
Step 3b: NetScaler deployments
Please follow the below steps if the license file extension is meant to be for NetScaler or Console.

2. On the generate license file extension page select Citrix component and enter the Host ID and click generate file button:

Note:
Host ID field in the extension blob generation flow is case-sensitive.
- To know the Host ID of your NetScaler Console Service, you can navigate to NetScaler Console GUI > License Management > Manual License Files Management tab and note the Host ID shown there.

- To know the Host ID of your NetScaler Console on-prem, you can navigate to NetScaler Console on-prem GUI > License

- To know the Host ID of your NetScaler ADC, you can use the below mentioned CLI command.
Note: Do not use the NetScaler ADC Host ID mentioned on NetScaler ADC GUI, use the CLI given Host ID only.
Note: If you have already used the NetScaler GUI-based Host ID, regenerate the LAS exception file extension blob using the Host ID from the NetScaler CLI command output and re-perform all the steps.
CLI command: shell /netscaler/lmutil hostid -n
Sample command and output:
> shell /netscaler/lmutil hostid -n
5aaa23b97486
Done
>
- To know the Host ID of your NetScaler SVM, you can navigate to NetScaler SVM GUI > Configuration tab and note the Host ID shown there.

Click “Download” to download the license file extension blob.
Prerequisites and Points to Note:
NetScaler (ADC, SVM)
Note: Applies to NetScaler local license type: Fixed Capacity Subscription License type and NetScaler Perpetual License Type.
Important Note:
If you are using or planning to use LAS exception blobs of type file extension on SVM 13.1 60.x or later, with NetScaler local license types (e.g., Fixed Capacity Subscription or perpetual licenses), please note the following:
A critical issue (JIRA ID: NSSVM-7346) will cause SDX to become non-functional, and the LAS exception file extension will not be honored.
To resolve this:
Steps:
Refer to all 4 steps
Step 1: How to use the LAS exception license file extension blob:
- For ADC:
Create a folder named 'extension' in the path /nsconfig/license
Run the command “chmod 775 /nsconfig/license/extension“. This gives appropriate permissions to the folder.
Then upload this LAS exception blob (to continue running file based license) to path /nsconfig/license/extension.
Note: If the NetScaler instance is already unlicensed, then a reboot will also be required.
Note: By default, it takes upto 24 hours for the applied LAS exception blob to come into effect and be honored. If you need it to come into effect and be honored immediately, then NetScaler ADC reboot will be required.
- For SVM:
Create a folder named 'extension' in the path /mpsconfig/license
Run the command “chmod 775 /mpsconfig/license/extension“. This gives appropriate permissions to the folder.
Then upload this LAS exception blob (to continue running file based license) to path /mpsconfig/license/extension.
Note: If the NetScaler instance is already unlicensed, then a reboot will also be required.
Note: By default, it takes up to six hours for the applied LAS exception blob to come into effect and be honored. If you need it to come into effect and be honored immediately, then NetScaler SVM reboot will be required.
Step 2: How to use the latest file-based license file
Follow this documentation to install and apply the latest license file:
Step 3: How to verify if the LAS exception license file extension blob has been applied properly on NetScaler ADC, SVM
Important Note: We recommend using approach (3b) 'Verification using logs’ approach or (3c) ‘Verification using script’ approach since they are deterministic ways of verification. The (3a) ‘Verification using GUI banner’ approach is not deterministic and may not give reliable output in all scenarios.
3a. Verification using NetScaler ADC GUI banner or NetScaler SVM GUI banner
There is a warning banner on the NetScaler ADC, SVM product GUI that keeps coming up if customer is on LAS compatible/enforced builds and yet using file-based licensing. This warning banner starts 120 days before 15th April 2026 (LAS enforcement date) and shows up each time admin logs in.
Once the LAS exception blob is applied, this warning banner will go away.
This is what the NetScaler ADC, SVM product GUI warning banner text says: Please transition to LAS (License Activation Service) based licensing from file-based licensing to avoid any service disruption, please refer to product documentation for more details.
Sample Screenshot:

Note: This GUI warning banner starts 120 days before the LAS enforcement / cut-off date. If you have got a LAS exception (file extension) for 3 months with end date of 15th July 2026, then your cut-off date is extended to 15th July 2026, and this banner will again start appearing from 120 days before the new cut-off date - i.e. you will again start seeing it from 15th March 2026.
3b. Verification using NetScaler ADC or NetScaler SVM logs
Note: This GUI warning banner starts 120 days before the LAS enforcement / cut-off date. If you have got a LAS exception (file extension) for 3 months with end date of 15th July 2026, then your cut-off date is extended to 15th July 2026, and this banner will again start appearing from 120 days before the new cut-off date - i.e. you will again start seeing it from 15th March 2026.
3b. Verification using NetScaler ADC or NetScaler SVM logs
For NetScaler SVM:
(i) Login to SVM using nsrecover username and password. Note that the password for nsrecover is the same as that of nsroot.
(ii) Run the command: zgrep -nri get_lmgrd_extension_remaining /var/mps/log/mps_inventory.log*
Sample output (i.e. the log line to look for): 2 Apr 26 10:26:46.430 +0000 [Debug] [#1] get_lmgrd_extension_remaining: File 'legacyext.blob' host: 112233445566, expiry: 1782863969
(iii) The 'expiry' is a EPOCH timestamp which can be converted into a regular date and time using any opensource tool.
Example: EPOCH convertor tool (Link: https://www.epochconverter.com/). Use the expiry value '1782863969' which is in EPOCH timestamp and convert it to regular date and time.
(iv) The date and time seen here should be aligned with the approved LAS exception file extension expiry date.

For NetScaler ADC:
(i) Login to ADC using nsrecover username and password. Note that the password for nsrecover is the same as that of nsroot.
(ii) Run the command: zgrep -nri nscfe_update_lasenforcement_extension /var/log/ns.log*
Sample output (i.e. the log line to look for): Mar 25 16:16:34 <local0.info> ns nsnetsvc[814]: nscfe_update_lasenforcement_extension(): LAS enforcement extended timestamp 1780876769
(iii) The 'LAS enforcement extended timestamp' is an EPOCH timestamp which can be converted into a regular date and time using any open-source tool.
Example: EPOCH convertor tool (Link: https://www.epochconverter.com/). Use the LAS enforcement extended timestamp value '1780876769' which is in EPOCH timestamp and convert it to regular date and time.
(iv) The date and time seen here should be aligned with the approved LAS exception file extension expiry date.
3c. Verification using script on NetScaler ADC or NetScaler SVM
The script automates the log-based verification for the NetScaler ADC or SVM.
Steps for NetScaler ADC:
Script Link - Script for LAS exception license file extension blob validation
(If the above link doesn't work for you, please use this KB article link to get the script -
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696544&articleTitle=Script_for_LAS_exception_license_file_extension_blob_validation&)
Steps for NetScaler SVM:
Script Link - Script for LAS exception license file extension blob validation
(If the above link doesn't work for you, please use this KB article link to get the script -
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696544&articleTitle=Script_for_LAS_exception_license_file_extension_blob_validation&)
1. Copy the script (via SCP) to /var/ directory on NetScaler SVM
2. Login to CLI (via SSH) to NS SVM and enter shell prompt
3. Go to var directory: cd /var/
4. Execute the script using this command: python extension_check.py
Sample Output for NetScaler SVM:
================================================
Log file analysis
LAS Exception for file extension Applied: YES
LAS Exception for file extension UTC end date: 2026-06-30 23:59:29
================================================
================================================
Blob file analysis
LAS Exception for file extension Applied: YES
LAS Exception for file extension UTC end date: 2026-06-30 23:59:29
================================================
Step 4: Additional steps to take if the NetScaler is unlicensed (specific to the NetScaler form factor):
For NetScaler ADC:
VPX (non-SDX), BLX:
Warm reboot (if not already done as mentioned in step 1 and step 2)
CLI command: reboot –warm
MPX:
CPX: Not Applicable. Reason: CPX does not support NetScaler local licenses
For NetScaler SVM:
Note: Applies to Console based licenses: CPL/UHMC/Pooled Bandwidth License Type
Steps:
Refer to all 4 steps
Step 1: How to use the LAS exception license file extension blob:
Go to Console Service GUI: NetScaler Licensing > License Management > Manual License Files Management > License Files section, select "Upload License Files from a local computer" and click on "Browse". Upload the LAS exception blob and then apply it.
Reboot all the external agents. For this, login to each external agent via SSH using username nsrecover and <password> and on the external agent CLI execute the command 'shutdown -r now'.

Step 2: How to use the latest file-based license file
Follow this documentation to install and apply the latest license file(s):
Step 3: How to verify if the LAS exception license file extension blob has been applied properly on NetScaler Console Service
Verification using Console Service > NetScaler Licensing > License Management GUI
For customers who have applied the LAS exception license file extension blob on Console Service, the Console Service > NetScaler Licensing > License Management GUI showcases a notification displaying the confirmation that the file extension blob has been applied and showcases the validity of the extension blob.
Example: “LAS exception of type License file extension is applied and valid until <(Day) (date) (time) (time-zone of the Console GUI)>”
If you see this notification, then you have verified that the license file extension blob has been applied. If you do not see this notification, then the license file extension blob has not been applied.
Screenshot:

Step 4: Additional steps to take if the NetScaler is unlicensed (specific to the NetScaler form factor):
Once the license information is visible in Flexed/ Pooled license dashboard under ‘Manually managed entitlements’ tab, individual NetScaler/SVM instances can be licensed.
For NetScaler:
VPX (non-SDX), BLX:
License using this documentation reference (this section link and onwards):
https://docs.netscaler.com/en-us/netscaler-console-service/manage-licenses/configure-flexed-licensing#manually-managed-entitlements-file-based-licensing
MPX:
Confirm that valid Z-cap license files are on the device. If not, upload/apply them. License using this documentation reference (this section link and onwards): https://docs.netscaler.com/en-us/netscaler-console-service/manage-licenses/configure-flexed-licensing#manually-managed-entitlements-file-based-licensing
Restore ns.conf after performing previous step.
Pick up the ns.conf (from /nsconfig directory) when NS was licensed (typical file name format ns.conf.(0-9)
Replace current ns.conf with the old ns.conf found in previous step.
Warm reboot MPX
CLI command: reboot –warm
CPX: No additional action needed.
SDX (SVM):
Note: Applies to Console based licenses: CPL/UHMC/Pooled Bandwidth License Type
Important Note:
If you are using or planning to use LAS exception blobs of type file extension on Console on-prem version 13.1 60.x or later, with Console-based license types (e.g., CPL, UHMC, Pooled BW), please note the following:
A critical issue (JIRA ID: NSADM-127861) will cause the Console on-prem to become non-functional, and the LAS exception file extension will not be honored.
To resolve this:
Steps:
Refer to all 4 steps
Step 1: How to use the LAS exception license file extension blob:
Create a folder named 'extension' in the path /mpsconfig/license
Run the command “chmod 775 /mpsconfig/license/extension“. This gives appropriate permissions to the folder.
Then upload this LAS exception blob (to continue running file-based license) to path /mpsconfig/license/extension.
Note: If the NetScaler Console managed NS instances are already in grace or unlicensed, then a reboot of Console will also be required.
Note: By default, it takes upto six hours for the applied LAS exception blob to come into effect and be honored. If you need it to come into effect and be honored immediately, then Console on-prem reboot will be required.
Note: For Console on-prem HA, apply the same extension blob on both the nodes. Do not generate the extension blob individually for both nodes. Generate it for the primary node and apply on both primary and secondary node.
Step 2: How to use the latest file-based license file
Follow this documentation to install and apply the latest license file(s):
https://docs.netscaler.com/en-us/netscaler-application-delivery-management-software/current-release/license-server/license-management#manually-managed-entitlements-file-based-licenses
Step 3: How to verify if the LAS exception file extension blob has been applied properly on NetScaler Console on-prem
Important Note: We recommend using approach (3b) 'Verification using logs’ approach or (3c) ‘Verification using script’ approach since they are deterministic ways of verification. The (3a) ‘Verification using GUI banner’ approach is not deterministic and may not give reliable output in all scenarios.
Verification using Console on-prem GUI banner
There is a warning banner on the NetScaler Console on-prem product GUI that keeps coming up if customer is on LAS compatible/enforced builds and yet using file-based licensing. This warning banner starts 120 days before 15th April 2026 (LAS enforcement date) and shows up each time admin logs in.
Once the LAS exception blob is applied, this warning banner will go away.
This is what the NetScaler Console on-prem product GUI warning banner text says: Please transition to LAS (License Activation Service) based licensing from file-based licensing to avoid any service disruption, please refer to product documentation for more details. Sample Screenshot:

Note: This GUI warning banner starts 120 days before the LAS enforcement / cut-off date. If you have got an LAS exception (file extension) for 3 months with end date of 15th July 2026, then your cut-off date is extended to 15th July 2026, and this banner will again start appearing from 120 days before the new cut-off date - i.e. you will again start seeing it from 15th March 2026.
3b. Verification using Console on-prem logs
(i) Login to Console on-prem using nsrecover username and password. Note that the password for nsrecover is the same as that of nsroot.
(ii) Run the command: zgrep -nri get_lmgrd_extension_remaining /var/mps/log/mps_inventory.log*
Sample output (i.e. the log line to look for): 2 Apr 26 10:26:46.430 +0000 [Debug] [#1] get_lmgrd_extension_remaining: File 'legacyext.blob' host: 112233445566, expiry: 1782863969
(iii) The 'expiry' is a EPOCH timestamp which can be converted into a regular date and time using any opensource tool.
Example: EPOCH convertor tool (Link: https://www.epochconverter.com). Use the expiry value '1782863969' which is in EPOCH timestamp and convert it to regular date and time.
(iv) The date and time seen here should be aligned with the approved LAS exception file extension expiry date.

3c. Verification using script on NetScaler Console on-prem
The script automates the log-based verification for the NetScaler Console on-prem.
Steps for NetScaler Console on-prem:
Script Link - Script for LAS exception license file extension blob validation
(If the above link doesn't work for you, please use this KB article link to get the script -
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696544&articleTitle=Script_for_LAS_exception_license_file_extension_blob_validation&)
1. Copy the script (via SCP) to /var/ directory on NetScaler Console on-prem
2. Login to CLI (via SSH) to NetScaler Console on-prem and enter shell prompt
3. Go to var directory: cd /var/
4. Execute the script using this command: python extension_check.py
Sample Output:
================================================
Log file analysis
LAS Exception for file extension Applied: YES
LAS Exception for file extension UTC end date: 2026-06-30 23:59:29
================================================
================================================
Blob file analysis
LAS Exception for file extension Applied: YES
LAS Exception for file extension UTC end date: 2026-06-30 23:59:29
================================================
Step 4: Additional steps to take if the NetScaler is unlicensed (specific to the NetScaler form factor):
Once the license information is visible in Flexed/ Pooled license dashboard under ‘Manually managed entitlements’ tab, individual NetScaler/SVM instances can be licensed.
For NetScaler:
Customers who are unable to migrate to the License Activation Service (LAS) by April 2026 may be granted an exception to continue using file-based license files beyond 15th April 2026. This applies to all file-based license types. To continue using file-based licenses the customer must have an approved exception to continue using file-based license files beyond 15th April 2026.
Approved customers will receive both of the following: