Hotfix package name: XA600R01W2K8R2X64074.MSP
For: Computers running Windows Server 2008 R2 with Citrix XenApp 6, Hotfix Rollup Pack XA600W2K8R2X64R01 installed
Replaces: XA600R01W2K8R2X64008, XA600R01W2K8R2X64021, XA600R01W2K8R2X64053, XA600R01W2K8R2X64057, XA600R01W2K8R2X64073
Date: July, 2013
Language supported: English (US), German (DE), Spanish (ES), French (FR), Japanese (JA), Simplified Chinese (SC)
Readme version: 1.00

Readme Revision History

Important Notes about This Release

• Note: As a best practice, Citrix recommends that you install this and other hotfixes only if you are affected by the specific issues they resolve. Otherwise, Citrix recommends that you wait for the next hotfix rollup pack for your product release. Hotfix rollup packs consolidate most previously released hotfixes and allow you to update systems in a convenient, single installation.
• Important: Installing this hotfix over an ICA session is not supported but you can install it through a remote desktop session using an administrator account.
• Caution! This release may require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

Important Disclaimer - Limited Release Hotfix

If the Download link is not available on this page and you wish to obtain this limited distribution release, visit our support site at http://www.citrix.com/support and open a support case using your Citrix account credentials, or contact your reseller at http://www.citrix.com/partners/locator.

Testing of this release was targeted only at the affected functionality, and regression and stress testing were minimal. Introduce this release to a test environment for evaluation before deploying it to a production environment.

TO THE EXTENT PERMITTED BY APPLICABLE LAW, CITRIX AND ITS SUPPLIERS MAKE AND YOU RECEIVE NO WARRANTIES OR CONDITIONS, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, AND CITRIX AND ITS SUPPLIERS SPECIFICALLY DISCLAIM WITH RESPECT TO THE HOTFIX ANY CONDITIONS OF QUALITY, AVAILABILITY, RELIABILITY, SECURITY, LACK OF VIRUSES, BUGS OR ERRORS, OR SUPPORT AND ANY IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, ANY WARRANTY OF TITLE, QUIET ENJOYMENT, QUIET POSSESSION, MERCHANTABILITY, NONINFRINGEMENT, OR FITNESS FOR A PARTICULAR PURPOSE. TO THE EXTENT PERMITTED BY APPLICABLE LAW, NEITHER CITRIX, NOR ITS SUPPLIERS SHALL BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, CONSEQUENTIAL, INCIDENTAL, MULTIPLE, PUNITIVE OR OTHER DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF DATA, LOSS OF INCOME, LOSS OF OPPORTUNITY, LOST PROFITS, COSTS OF RECOVERY OR ANY OTHER DAMAGES), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, AND WHETHER OR NOT FOR BREACH OF CONTRACT, NEGLIGENCE OR OTHERWISE, AND WHETHER OR NOT CITRIX, ITS SUPPLIERS, OR LICENSORS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see Citrix eDocs, the Citrix Product Documentation Library.

New Fixes in This Release

1. The smart card tile might fail to appear after dismissing the Windows logon banner message. As a result, only the option of "Other User" is available for users to select.

   [From XA600R01W2K8R2X64074][#LA4001]

Fixes from Replaced Hotfixes

1. The Windows logon screen of the first connection attempt after a server restarts does not show the smart card tile.

   [From XA600R01W2K8R2X64008][#LA0848]

2. This fix addresses various smart card performance issues, including logon delays.

   [From XA600R01W2K8R2X64008][#LA0922]

3. Gemalto's regtool.exe can show a handle leak in the client session if the endpoint does not have smart card drivers installed.

   [From XA600R01W2K8R2X64021][#LA1333]

4. If a smart card is present in the card reader at the client device, the smart card PIN prompt can fail to appear. The issue occurs when a legal notice banner is configured and the user does not dismiss (accept) the notice within four seconds of its appearance. In such scenarios, the PIN prompt does not appear as the wait for the smart card event times out. This fix introduces support for the following registry key to extend the amount of time, in seconds, before a timeout on the smart card event occurs:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard
   Name: SSEEETimeout
   Type: REG_DWORD
   Data: <Range of 4-120 (decimal) >

   With the above registry key set, the application launches properly if the user dismisses the interactive logon message within 40 seconds; otherwise the application exits after providing the smart card PIN. To prevent this and give users up to 120 seconds to respond to the PIN prompt, additionally set the following registry key:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
   Name: LogoffCheckerStartupDelayInSeconds
   Type: REG_DWORD
   Data: <An integer for the length of time to wait for application start. - Enter the delay time in seconds, up to 10 minutes (600 seconds), but no less than the value configured for SSEEETimeout above.>

   [From XA600R01W2K8R2X64053][#LA2272]

5. Certain applications running in a session authenticated using a BEID smart card can become unresponsive.

   [From XA600R01W2K8R2X64057][#LA1367]

6. A smart card cannot be read if a published desktop gets locked.

   To enable this fix, you must create the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard
   Name: EnableCtxCleanup
   Type: REG_DWORD
   Data: 1

   [From XA600R01W2K8R2X64057][#LA2343]

7. Sessions can become unresponsive when smart card services are running but no smart card reader is present.

   [From XA600R01W2K8R2X64073][#LA3469]

Installing and Uninstalling This Release

Notes:

• This hotfix is packaged with Microsoft Windows Installer 3.0 as a .msp file. For more information about deploying .msp files, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.
• This installer program complies with Microsoft User Account Control (UAC). If UAC is enabled, you must run the installer program in elevated mode; that is, with administrative privileges enabled. For more information about UAC, see Microsoft TechNet or visit the Microsoft Web site and search on keyword UAC.
• To install this hotfix successfully, servers must not have registry modification restrictions in place.
• Slipstreaming - installations of the XenApp Server base product packaged with one or more individual hotfixes - is not supported and might leave servers in an unstable state.
• You must restart the server after the installation of this hotfix completes. However, if you are installing multiple hotfixes at the same time, there is no need to restart the server after the installation of each hotfix. It is sufficient to restart the server after the installation of the final hotfix completes.
• If the need arises to restore the original settings and functionality provided by this hotfix, you must uninstall the hotfix before reinstalling it according to the installation instructions below.

To install this hotfix:

1. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.
2. Close all applications.
3. Run the executable.
4. Restart the server. This ensures that the installation completes and that the hotfix is added to the hotfix inventory list of the Delivery Service Console.

To uninstall this hotfix:

1. From the Start menu, select Control Panel > Programs and Features.
2. Highlight the hotfix you want to uninstall and click Uninstall.
3. Follow the directions on-screen.

Files Updated (All Dates/Times UTC)