arnaudPatches, Xenmobile

Citrix has released few days ago the Rolling Patch 4 for XenMobile Server 10.5.0, here after some information.

New Fixes in This Update
  1. XenApp or XenDesktop applications from a non-default category might enumerate without displaying an icon. Attempts to launch these applications might fail and the following error message appears:”Failed to get application details, please try again later.”
  2. The automated action “Send notification” for the trigger “The device is unmanaged” might repeat indefinitely even when the repeat interval event is set to “None.”
  3. With the client property “SEND_LDAP_ATTRIBUTES” configured and the Global Catalog Root context configured in the LDAP properties on XenMobile Server, Mobile Application Management registration might fail for users with alternate UPN suffixes.
  4. After you make changes to the Settings > Google Play Credentials page in XenMobile and click Save, the following error message might appear intermittently:”Email or password incorrect.”
Fixes from Replaced Releases
  1. Notifications do not get triggered as part of an automated action if the notification template is set to either the Location Service Disable template or the Find My Phone template.[From xms_10.5.0.10011.bin]
  2. The syslog server does not show the app name during the app download.[From xms_10.5.0.10011.bin]
  3. When you configure a XenMobile webclip policy and enter a name and URL with HTML special characters, such as an ampersand (&), the name and URL encodes the characters when you save the policy. Subsequently, the URL breaks when you deploy the policy to managed devices.[From xms_10.5.0.10011.bin]
  4. When you add a public Google Play Store app in the XenMobile console, the app search function does not pass through the proxy as expected and search fails to return the correct apps.[From xms_10.5.0.10011.bin]
  5. When you create an RBAC role in XenMobile and you include an ampersand (&) in the name, after saving the role, the symbol is encoded and you cannot edit the name.[From xms_10.5.0.10011.bin]
  6. Attempts to logon to XenMobile administrator console fails. This fix restores logons to admin consoles available in previous releases.[From xms_10.5.0.10011.bin]
  7. Performance degradation might be seen on enumeration when using XenMobile Server 10.5.0.[From xms_10.5.0.10011.bin]
  8. The RBAC roles and delivery groups might lose Active Directory groups, causing enrolled users to lose their entitlements. The issue occurs when the response from the LDAP server is empty during Active Directory group sync.[From xms_10.5.0.10025.bin]
  9. Required apps and policies might not push to the iOS device automatically.[From xms_10.5.0.10025.bin]
  10. If the LDAP is set to search by UPN and a group invitation contains members with different sAMAccounts, configuring and saving the UPN on the XenMobile Server can result in the invitation not appearing in the table on the “Enrollment Invitation” page.[From xms_10.5.0.10025.bin]
  11. In the VPP ID Assignment table on the Configure > Apps settings page, the Associated Device column might show a device’s serial number as Hidden.[From xms_10.5.0.10025.bin]
  12. Attempts to search devices from the XenMobile console might take a long time to complete. To enable the fix, you must add “device.enable.filter.count” in the server property and set it to “False.”Note: This change in the server property does not require a server reboot.[From xms_10.5.0.10025.bin]
  13. Attempts to access the XenMobile store might fail, resulting in the following error message being displayed:”Cannot complete your request.”[From xms_10.5.0.10025.bin]
  14. With this update, you can use the CLI option to specify which SSL protocols XenMobile Server uses out of TLS v1, TLS v1.1, and TLS v1.2. By default, XenMobile Server enables each of the SSL protocols. When you change the SSL protocol setting, you must restart XenMobile Server. Perform the steps below to enable or disable the protocols:
    1. Open the XenMobile Server CLI, select [2] System, and select [12] Advanced Settings.
    2. Select [3] SSL protocols.
    3. After the prompt “New SSL protocols to enable,” type the protocols you want to enable. XenMobile Server disables any protocols that you do not include in your response.
      For example, to disable TLSv1, type TLSv1.2, TLSv1.1 and then type y to restart XenMobile Server.

    [From xms_10.5.0.10038.bin]

  15. When StoreFront is configured with a Subject Alternative Name (SAN) certificate, the XenApp HDX application icons might not enumerate.[From xms_10.5.0.10038.bin]The XenMobile Server might become unresponsive due to high memory usage.

    [From xms_10.5.0.10038.bin]

  16. When you attempt to edit an existing Delivery Group on XenMobile Server, the name of the Delivery Group might fail to appear in a high network latency environment.[From xms_10.5.0.10038.bin]
  17. Attempts to add deployment rules when you create automated actions in XenMobile Server might not be saved.[From xms_10.5.0.10038.bin]
  18. The Device Enrollment Program for iOS devices might go unmanaged and leave the apps to be orphaned.[From xms_10.5.0.10038.bin]
  19. In some XenMobile Server environments in a clustered configuration, memory allocation issues might occur on all nodes. When this occurs, the servers become unresponsive.[From xms_10.5.0.10038.bin]
Installing This Update

Note: If your system is configured in cluster mode, follow the steps below to update each node, one after the other.

Important: Before installing this update, take a snapshot of the current settings and create a backup of the database.

  1. Log on to your account on the Citrix website and download the XenMobile Server update (.bin) file to an appropriate location.
  2. In the XenMobile Server Console of a node click Settings > Release Management. The Release Management page appears, which displays the currently installed software version, as well as a list of any updates, patches, and upgrades you have already uploaded.
  3. Under Release Management, click Update. The Update dialog box appears.
  4. Click Browse to upload the update (.bin) file you have downloaded from support.citrix.com.
  5. Click Update and then if prompted, restart the XenMobile Server node using command line.

To verify the patch deployment

After installing this patch, log on to the XenMobile Server Console as an administrator, then navigate to Settings > Release Management > Updates. Information about the most recent successful patch installation appears in this section.