If a device cannot enroll and authenticate using Secure Hub, ask the following questions:

• Is the user synced to XenMobile?
• Are there multiple domains managed? For details on multi-domain configuration in MAM+MDM mode, see this Citrix blog post.
• Is the Global Catalog port managed? From which domain are users unable to authenticate to XenMobile?
• Does the user have privileges in Active Directory?
• Is the APNs certificate valid?
• Are the APNs and App Store IP addresses are not present (hardcoded) in the host entry of the XenMobile?
• If there is a proxy for APNs communication, is the proxy working properly?
• Have you run connectivity checks? For details, see Connectivity Checks. 

• Troubleshooting Checklist: Users cannot browse internal websites in Secure Web
• Troubleshooting Checklist: Exchange SSO is not working in Secure Notes for iOS, but does work in Secure Notes for Android.
• Troubleshooting Checklist: Users cannot send notes created using Secure Notes via Secure Mail
• Troubleshooting Checklist: In the ShareFile app, Secure Mail, or Secure Notes, the following error appears: "Your connection is unavailable. Only offline files can be accessed."
• Troubleshooting Checklist: In Secure Mail, a "Cannot authenticate to the server <FQDN> because the certificate is not valid” error appears.
• Troubleshooting Checklist: In Secure Mail, an “Access to your company network is not available” error appears.
• Troubleshooting Checklist: In Secure Mail, a “Verify your Single Sign-On credentials” error appears
• Troubleshooting Checklist: Cannot send emails using Secure Mail
• Troubleshooting Checklist: Emails are not syncing in Secure Mail, or email folders are not found, or Secure Mail is prompting users for a password multiple times
• Troubleshooting Checklist: Users cannot access apps in Secure Hub
• Troubleshooting Checklist: Cannot get required apps on an iOS device