On Premises Studio reports the message: “During image preparation, the rearming process for the copy of Windows installed on the master image failed.”

In Citrix DaaS, the catalog operation finishes with the warning "Operating System Licensing Rearm failed" (ImagePreparationOSRearmFailed). The master image is not rearmed."

The image preparation log on the preparation VM located at the following location (C:\Program Files\Citrix\PvsVm\Service\PersistedData\PreparationStatus.xml) shows the following message under the OsRearm step: 

System.Management.ManagementException: Invalid parameter
   at System.Management.ManagementBaseObject.GetPropertyValue(String propertyName)
   at Citrix.MachineCreation.ImagePreparation.SoftwareLicensingService.get_ClientMachineID()
   at Citrix.MachineCreation.ImagePreparation.ImagePreparation.RearmWindows(PreparationResults results)

Running slmgr.vbs commands on the same machine (for example /ipk or /skms-domain) can fail with error 0x80041008, Invalid parameter (SWbemObjectEx). 

The November 10, 2026 Windows security updates include a change Microsoft made to address CVE-2026-96300. After this update, the Windows Software Licensing WMI provider rejects the query that MCS image preparation makes for the client machine ID before it rearms Windows. The query fails with 0x80041008 (Invalid parameter), so the rearm step cannot run. 

Microsoft lists this as a known issue in the November 2026 update release notes. It is not caused by Citrix, and no change in MCS will make the rearm succeed while the issue is present. 

https://support.microsoft.com/en-us/servicing/os/windows-10/2026/11/kb5131085-windows-10-1809-security-update 

Microsoft expects to release a fix by the end of the day on November 13, 2026. When it is available: 

1.Install the fix on the master image. 
2.Shut down the master image and take a new snapshot. 
3.Update the machine catalog with the new snapshot so that image preparation runs again. 
4.Confirm that the catalog update completes without the rearm warning. 

Until the fix is available, choose one of the following: 

•Contact Microsoft Support for business for the workaround that Microsoft provides for this issue. 
•Keep using the master image snapshot taken before the November 2026 update, and postpone catalog updates that use the new image until the fix is installed. 

Note: Machines created from an image that was not rearmed share the same KMS client machine ID. A KMS host counts them as a single machine, so they may not reach the KMS activation threshold. Machines that are already activated stay activated. 

Citrix is actively monitoring multiple reported issues following the installation of the Windows November 2026 Security Update on Windows Server and client OS based Virtual Delivery Agents (VDAs)

After installing the November 10, 2026 Windows security update on a master image, creating or updating a Machine Creation Services (MCS) catalog reports that the Windows rearm failed during image preparation.

• Citrix DaaS and Citrix Virtual Apps and Desktops (on-premises), using MCS with image preparation (Windows rearm) enabled. 
• Master images running Windows Server with the November 10, 2026 security update installed: 
• Windows Server 2019: KB5131085 (OS Build 17763.9487) 
• Windows Server 2022: KB5131090 (OS Build 20348.5870) 
• Windows Server 2025: KB5131080 (OS Build 26100.33822) 

https://support.microsoft.com/en-us/servicing/os/windows-10/2026/11/kb5131085-windows-10-1809-security-update
https://support.microsoft.com/en-us/servicing/os/windows-server/2026/11/kb5131090-windows-server-2022-security-update
https://support.microsoft.com/en-us/servicing/os/windows-server/2026/11/kb5131080-windows-server-2025-security-update
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96300
https://learn.microsoft.com/windows-server/get-started/activation-slmgr-vbs-options