Getting Legacy Apps to work on StoreFront 3

With many customers upgrading to Citrix StoreFront – I have been asked several times how you go about getting older Presentation Server 4 farms (Yes, its still out there!!) to work and present the apps inside your StoreFront.

Don’t forget these apps , operating systems and the PS4 platform will be long out of support, but still in use for legacy reasons.

The same fix applies for Web Interface 5.4 and comes from two settings that you need to change – which refer to Launch References.

So, to fix this – If using Web Interface:

Go to your WebInterface.conf on your web interface site – eg:


and change RequireLaunchReference and OverrideIcaClientname to Off and On respectively:


If using StoreFront:

C:\inetpub\wwwroot\Citrix\Store\web.config  – and search for the two settings – set the same.

Then go to a admin command prompt – and do IISreset.
In StoreFront, add settings for a additional farm under Manage Delivery Controllers.
Then go into your desktop Receiver, and refresh the applications – and test the app works. Above, I tested an old copy of Visio from a 2003 Citrix server with Presentation Server 4.0.through latest StoreFront v 3.

KMS – Quick Guide for Citrix Provisioning Server Devices

Microsoft Key Management Server can be a tricky role to setup,  but it’s an important part of a solution that needs deployed carefully in AD and configured for Citrix virtual machines booting from the same vdisk. There are lots of detailed articles on how to setup KMS, and trouble shoot issues – this is a very quick guide to the main issues I have came across when setting up 2012 Server and Office 2010 and 2013.

This guide assumes you are using Windows 2008 R2 or 2012 server, and either Office 2010 or Office 2013 – and that you have created a vdisk from a gold-image build. The downloaded media maybe KMS or MAK – but needs to be KMS for Citrix Provisioning Server in most scenarios. The same steps apply for 2012 Server.

KMS Server

The KMS product licenses for your organisation must be install on a KMS server in your Active Directory. For Windows 2012, and Office 2013 – you will need the Office 2013 Volume License Pack installed on the 2012 KMS server hosting that role.

To install  2012 KMS have a look at this article –

I would also recommend the Volume Activation Management Tool (VAMT) is installed. This is very helpful and enabled you to see what clients and software have registered and been granted a license. The tools are part of the Windows 8 deployment kit.

For PVS machines, KMS clients keys are required for the OS and for Office 2010 and 2013 – each version (ie Professional, Pro Plus, Std) has its own KMS or GVLK (see References). If you have Office, and separate licenses for Project or Visio – you need to add these separately.

The process to make a PVS machine a KMS client involves these steps:

  1. Make server OS KMS client
  2. Make Office KMS client
  3. Re-arm Office
  4. Re-arm OS
  5. Shutdown – Set vdisk to use KMS, then reboot.

STEP 1   – Make server OS KMS client

Check vdisk is set to “none” in the Volume Licensing section of the Properties, and read/write mode enabled (Private mode)

At an Admin command prompt, type “slmgr /dlv – this will return something like:


To Change OS from MAK to generic KMS client:

Windows 2008 R2 Std –  Command Prompt: slmgr.vbs /ipk YC6KT-GKW9T-YTKYR-T4X34-R7VHC

Windows 2012 Std –       Command Prompt: slmgr /ipk XC9B7-NBPP2-83J2H-RHMBY-92BT4

To check it’s now KMS – use “slmgr /dlv” again – it should show the following;


“VOLUME_KMSCLIENT” will now be listed, along with the Partial Product Key – the last 5 digits of the generic KMS client key.

STEP 2  – Make Office KMS client

Install the Office KMS keys using the ospp.vbs script – located C:\Program Files (x86)\Microsoft Office\Office14 (eg Office 2010 x32) – of search for the location and move there in command prompt.

cscript ospp.vbs /inpkey: VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB


STEP 3 – Re-arm Office

Locate the folder where the ospprearm.exe is located – for x32 bit Office its here:

C:\Program Files(x86)\Common Files\Microsoft Shared\ OfficeSoftwareProtectionPlatform

At a command prompt – move to that folder – and run the following command – ospprearm.exe

You should see a “successful” message to confirm this has worked.


STEP 4 – Re-arm the server OS

Type “slmgr /rearm” – a pop-up should return a successful rearm message.

STEP 5 – Shutdown the server

Do not reboot when prompted, shutdown. Go into PVS and set the Vdisk to KMS, then restart.



Provided your KMS server has licenses, your VMs should now be able to ask it for a KMS key, and activate successfully.

Note, server clients like 2008 and 2012 require 5 machines to register before the server actually dishes out the license. So, you may need to spin up 5 PVS devices, even if you are only using 2-3 devices in production. Check in the machines system properties to see if it has been Activated.

Or, you could make some of your management servers use KMS ie a StoreFront server, or Delivery Controller. Office 2010/2013 has similar requirements in terms of numbers, while Windows 7 machines in XenDesktop need 25.

Useful links

Citrix Configuring KMS Licensing for Windows and Office 2010 and 2013

KMS Server

Office 2013 Volume License Pack – install on KMS server.

Troubleshooting KMS error codes

Generic Keys

Office 2013

Office 2010

Office 2010 Config Tools

VAMT tools

Some Generic KMS Keys

Office 2013 Professional Plus        YC7DK-G2NP3-2QQC3-J6H88-GVGXT

Office 2013 Standard                     KBKQT-2NMXY-JJWGP-M62JB-92CD4

Project 2013 Professional              FN8TT-7WMH6-2D4X9-M337T-2342K

Project 2013 Standard                   6NTH3-CW976-3G3Y2-JK3TX-8QHTT

Visio 2013 Professional                 C2FG9-N6J68-H8BTJ-BW3QX-RM3B3

Office Professional Plus 2010       VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB

Office Standard 2010                    V7QKV-4XVVR-XYV4D-F7DFM-8R6BM

Office Home and Business 2010   D6QFG-VBYP2-XQHM7-J97RH-WRC

Get Certified

Along with experience and academic qualifications – product certification is essential for systems engineers AND software engineers in the modern IT world. I have worked a lot with Microsoft, Citrix and VMware in their partner programs over the last ten years for my company, for both individual staff requirements and partner status.

The latest Citrix certifications focus on XenDesktop/XenApp design, deployment and management. You can get certified on most of the Citrix product line but its best to start with products you work with every day, have just been trained on or are targeting a new career path. Starting at the bottom, Citrix Certified Associate – Virtualization covers XenApp/Desktop, some licensing and basic deployment. You can then add a few more separate exams for enterprise management, basic NetScaler and work towards the high end exam for Citrix Certified Professional (CCP-V) and Expert (CCE-V). Most recent additions are the Citrix Certified Professional – Mobility (CCP-M) which covers XenMobile design and deployment.

Why bother?

Throughout my career I have had to do certifications for PC’s, server operating systems and especially Citrix products, as well as mentor younger staff and colleagues and point them down the right certification track for their career development. In the last ten years for example, I have completed forty certifications. Some have expired, and some are very recent such as CCP-M, CCP-V. I would not be in my current job, earning a good salary if I had not kept my certifications up to date.

The disadvantages of certification are few. You will need to spend time, usually your own, studying and installing products, following training guides and best practice papers in order to pass any exams. You may not always get on a training course. Passing the exams also requires a certain amount of determination and calmness, along with exam technique.

A training course, if you need one is usually not free – and exams cost between £100 and £250 in the UK. Another disadvantage is that certifications expire, hence  it is important to keep up to date. To do this, you should target 2-3 exams per year as a minimum. That way, you will be refreshing exams every year, gaining new knowledge and keeping ahead.

The advantages are plenty. For one, you will gain more in depth knowledge of the products and maybe one or two products you don’t use if you are following a “track” system like Citrix and Microsoft’s where you must complete 5-6 exams to become a Citrix CCP-V, or Microsoft Certified Professional Developer , MCPD.

A typical “track” may take you down the MCPD :“Design and Development of Web Applications in .NET Framework” for example. If you’re considering a Citrix path – start with a single product like XenApp server, then XenDesktop. You can then try the enterprise exams and work your way towards CCV-E and CCP-V for Virtualisation.

Most partner companies will also provide study guides, access on online training and videos and special partner programs with a specialist contact that can assist you and your team with certifications in their “tracks”. You may even get exam vouchers. There are many good exam preparation books availably, study guides and “brain dumps”. I often recommend

Microsoft, Adobe and others are constantly updating products, and often require certification in order for your company to sell the new products or retain your status. This may mean that a team of developers may need to have 10-15 certifications as a minimum just for the company to be a Gold Partner. In a few years, this may change and a new product release will force an update to the certifications.

When applying for jobs, a person with certifications will almost certainly be in with a better chance of employment than a person without. Your current employer should also recognize your studying and reward you financially. Indeed, your whole career path should be based on experience, project success, work competence – and your certifications.

When I interview for staff – I also think the person with more certifications is more interested in their career, in IT and in developing themselves than someone who hasn’t bothered. If you are really “into” IT – you will be keen to get certified in products you are working with.

Product certification is essential for the employer.

Partner status with Microsoft come in different levels –Core,Silver,Gold etc. These are partly based on sales, but also on the number of certified engineers or developers you have. This in turn can impact your companies’ discount purchasing and reselling in the supply chain. You may also be given sales leads, and involvement in new product releases ahead of non-certified companies.

Partners often get free partner licenses. This not only saves your company money, but gives them access to nearly all the partners’ products for free, as well as getting beta releases and access to software “api”’ that non-partners won’t get access to.

Partner status is an important status symbol. Potential customers will compare company certifications and individual CV’s to award contracts. Certifications for staff could make the difference between your company winning the business – or closing down!

I don’t see too many areas where certification is not possible. You can be certified in developing, Prince II, Ethical Hacking, security, HP hardware, EMC storage, VMware, Citrix,ITIL, ISO Auditing – the list is almost endless.

The one area you can’t be certified in is your own communications skills, personal interaction, and ability to talk to customers and present your solutions. This really comes with experience and practice – so get some colleagues together and practice on them to hone your presentation skills.

Certification is not a replacement for great experience, but in my opinion is essential for IT staff, engineers and developers alike – if they want to progress their career, keep skills up to date and be regarded as subject matter experts in their field or specialist area. Having both, means you know the products in depth.

In terms of actually doing exams, these are typically done in exam centers with monitored rooms in industry approved organisations. Pearson-View and Sylvan Prometric are two such companies, and will have an office or training partner in most countries and big cities. Individual product exams typically have about 60 multiple choice questions. The Citrix Professional and Expert have a split of about 30 multiple choice and the rest are based on a scenario or analysis report and you then have to make choices, and backup your design. Good luck!








XenDesktop & XenApp 7.5 – time to get planning!

Time is moving on for the current XenApp 6.5 platform with only some two years left to go on the standard Life Cycle, that will come around sooner than you think.

There are many things to consider when moving to a new XenApp platform, not least of all changes in operating systems, application compatibility and printing (as always). Since my early days of working on MetaFrame 3, Citrix has been promising reduced management overheads, fewer consoles and better support for mixed OS environments. However, while they did do away with the old Citrix Management Console eventually, you were still left with Web Interface, Licensing and AppCentre to manage different parts of your environment. Then of course XenDesktop came along and brought new consoles, new management protocols and another database – and a StoreFront. Nearly forgot –  a Provisioning Server farm, console and database just to keep you on your toes!

My previous blog post on AppDNA touched on the challenge of making applications compatible with new desktop and server operating systems. But what about the management challenge of hosting virtual desktops, shared desktops and publishing your applications?

Citrix has been working hard on that chestnut for a couple of years and the recent launch of XenDesktop/XenApp 7.5 now provides administrators with the ability to manage and deploy various operating systems and applications from a more unified console, namely Citrix Studio.

Key to this new platform is the FlexCast Management Architecture, or FMA. FlexCast was previously used in licensing terms only. For nearly twenty years now Citrix Presentation Server based products including XenApp 6.5 have relied on IMA – Independent Management Architecture for the underlying farm communications, load balancing, policies, and admin etc etc. A tried and tested product, many millions of users have been relying on IMA all over the world for application and desktop delivery.

Here are a few of the new terms to get your head around –

Instead of this in XenApp 6

Think of this in XenApp 7

Independent Management Architecture (IMA)

FlexCast Management Architecture (FMA)


Delivery Site

Worker Group

Session Machine Catalog, Delivery Group


Virtual Delivery Agent, Server OS Machine

Desktop OS Machine

Zone and Data Collector

Delivery Controller

Delivery Services Console

Citrix Studio and Citrix Director

Publishing applications

Delivering applications

Data store


Load Evaluator

Load Management Policy


Delegated Administrator Role

(Source, XenApp eDocs – )

FMA however introduces some new capabilities that IMA could not deliver. The main being the ability to deploy the Citrix Virtual Desktop Agent (VDA) to both Windows desktop operating systems, and servers –  and manage both in the same place. Think about that for a second. No more multiple farms with different version of Windows and XenApp. A single console where you manage desktops, machine images and applications. You can even use the VDA on physical PCs – useful for administrator or power users with heavy graphics and connect directly with HDX.

Key Components:


Of course, with change – there are some things that are no longer. User Shadowing, Oracle Database support, SSO for Win 8.1/2012, Local Text Echo, Legacy Printing (XP/DOS clients) –  are no longer supported. Secure Gateway, still in use by some customers, is no longer supported and customers are advised to move to NetScaler Gateway as a replacement for remote access. Web Interface is still supported but customers are also expected to migrate to StoreFront with Web Interface having a limited shelf life and no further development.

So get planning! A two year window to get all your old x32 or 16 bit applications tested, upgraded or redeveloped is really not very long. Some will be easier than others. With an AppV now bundled, you could give that a try or look at Unidesk. Licensing, print strategy, remote access and your hyper visor platform all need careful consideration. I’ll be looking into those in more depth in my next few blogs.

Useful Links:

XenApp 7.5 and XenDesktop 7.5

XenApp/Desktop 7.5 – Not supported

XenApp Support Matrix


Citrix Synergy 2014 Review

My preview of Citrix Synergy 2014 a few weeks back highlighted the ever growing focus on mobility and data sharing that was certain to be a big topic this year. Following on from the purchases of Zenprise and ShareFile, Citrix have finally got to grips with integrating these products into the brand and with NetScaler and XenApp/Desktop – which have also seen several enhancements. So off to LA on a long Virgin Atlantic flight for a few days.

The first day keynote from CEO Mark Templeton was a stirring opening. Some great use cases for Citrix Cloud services (BT) and AutoDesk winning the heralded Innovation award. “Autodesk??” you say.. “The 3D CAD people?”  Yes Sir! That’s the one.



Above, Citrix CEO Mark Templeton

An emotional speech at times, with Mr Templeton due to stand down this year – there were certainly a few teary eyes among the crowd. His successor may not have been announced just yet, but his parting words “Leave it better than you found it” will certainly be remembered.

The main Expo hall had plenty to see and do with many great products from numerous partners. We spent a good bit of time at the CA Nimsoft stand and got a great demo of their monitoring tools for XenApp and XenDesktop.


A welcome product update due in Q3 is the latest Citrix Receiver X1. For anyone using Worx Home for XenMobile – this is will integrate the on-boarding and corporate app store features of app Controller with a built in Citrix Receiver client. No more having to configure two clients, one with dummy settings to avoid the prompts etc. 


Other new features include easy branding for your app store. This was previously very tricky to do on StoreFront with hardly any on mobile devices. The new X1 will allow you to add corporate logo and colour schemes to your heart’s desire.

“Big News”

Another key announcement was Citrix Workspace Suite. This suite bundles XenDesktop, XenApp, XenMobile and ShareFile into one customer license for $450 per user. This is said to represent a saving of some 70% on purchasing the individual products. That’s a lot of product for your $ or £.

Back to mobility. Several really nice tools will be out soon for mobile devices including Worx Desktop which connects back to your PC and gives seamless access to documents. Worx Notes, a simple note taking utility that will give you access to save a quick note back to ShareFile or your corporate folders. ShareFile has shipped over 1,000,000 licenses in the past year and can now hook into GoToMeeting and other cloud storage services.

XenDesktop and XenApp have had some major enhancements to HDX with the addition of Adaptive H.264 encoding, double the speed frame refreshing on 3G connections, a reported 100% increase in bandwidth efficiency across a WAN for video quality and 10x reduced bit rate for HD video on low speed connections. Citrix certainly are not taking the foot of the gas on the virtual desktop front.

Putting all this together in a cloud infrastructure sounds daunting – or great fun if you’re a techie! To help with all that hosting Citrix now have WorkSpace Services. You can start from the bottom and use an automated tool called “Design and Automation” to build it all. Ideally a platform for service providers – it sure looks impressive on the demo.

Of course to access all of this you need the Citrix Receiver and apart from the X1 release, new HTLM5, MAC and Chrome book versions are able to provide even better user experience with added support for USB3, flash, webcams and  Microsoft Lync enhancements for Linux and iOS devices.

There’s lots more over on Citrix TV and YouTube   – for now, here are a few links to the key topics and announcements.


AutoDesk Innovation Winner:

Receiver on Chrome:

Receiver X1:

ShareFile update:

Workspace Suite:

Works Desktop:

What’s New in XenDesktop and Xenapp:

WorkSpace Services – Design and Automation:

Securing Mobile Devices – Use Case:

Session Printers in XenApp 6.5

Citrix has several ways to enable printers in user’s sessions including network print server based printers. These are called Session Printers and are configured in the Policies node in the Citrix AppCentre Management console.

Printers can also be mapped using a login script or Vb-script. In this case, all the print server drivers for individual printers need install on the XenApp server of PVS image. Printers mapped in scripts are outside of the control of Citrix Policies and management.

By Using Citrix Policies, administrators have more control over when and how printers are made available.

For example, a set of Printer Policies filtered by IP Subnets could be used to enable roaming printers on mobile devices or laptops. Users would then find printers in session that are close to the department they are working in at the time. Other filters include Groups/Users and client device names.

So, you could have a Policy that is enabled by “IPAD*” for example where all devices called IPAD will get that policy – and enabled printers and other settings.

Client connected printers (not addressed here) are either locally attached OR may be mapped network printers on a PC or Mac client machine. These can be controlled in Citrix AppCentre Management and are known as Client Connected printers.

Citrix XenApp servers can use server printers in two ways:

  • Citrix Universal Print Server (requires UPS server and client install, on XenApp media).
  • Native Manufacturers Printer driver.

To install a native driver

  • login as an admin to the XenApp server.
  • browse the print server and find the printer (must have x64 drivers).
  • double click and install the printer as normal.
  • then delete the printer from the Control Panel/Devices and Printers – leaving the driver installed.

Creating a Policy with Session Printers

The three steps you need to enable Session printers are:

Create a new User Policy

Under Policies – select the User tab, and click on New – or edit an existing policy. Givr your policy a name.

Assign the Session Printers

Go to Settings and look for Printers

Click on Add/Edit at Session Printers – when prompted type the name of the print server – and browse the servers printers – select the printer you need.

Add in other printers if required – you can also set the Default printer as shown above.

Filter by AD User Group

Click on the item you want to use as the filter – for example, User of Group.

You should then test the policy by using a suitable test account or known user. If the UPS service is compatible with the printer – the device should be shown as an available printer in the users session and applications.


  • Citrix UPS is not compatible with manufacturers Universal Drivers.
  • If the Citrix UPS Driver does not print to the device – the native driver will need to be installed. The server policy should be set to “fallback” to native in this case.
  • Some printer drivers may not be Citrix ready. It is recommended to check the vendors support or documentation regarding suitable models and drivers.

Some manufacturers support references:

HP Supported Printers in XenApp

Ricoh Terminal and Citrix supported printers




What’s up at Synergy 2014?

If you have never been to a Citrix Synergy event – Synergy is the best conference for Citrix engineers, sales and geeks everywhere. The event used to be held in both the USA and Europe until Citrix split up the event in the EU to 4-5 separate product days instead.

As you can imagine, the whole event is about the many great products in the Citrix portfolio. This has changed somewhat since my first one ten years ago when it was nearly all about Presentation Server, some remote access, best practice for terminal servers and what thin client worked best.

Today, the event is a very busy and full featured show with many industry leading products like XenDesktop, ShareFile, XenMobile, AppDNA and Netscaler being just a few.

In fact, the tricky part is fitting in everything you want to see in the three days. Along with experts on the various products and real customer experiences, you can also indulge in technical labs and even have a crack at some certifications in between sessions.

This year promises a feast of information and best practice for anyone interested in Mobility. With product like ShareFile, Worx Mail not to mention XenMobile taking up many of the sessions. There are also a load of specialist breakout sessions focused on specific technologies from real live customers and partners. You can catch me at 1630 pm on Thursday 8th May talking about XenMobile use cases.

I’m looking forward to some exciting demos from Brad Peterson – why do his demos always work?

What’s that? You can’t make it to LA? Don’t worry you can catch up on all the best sessions and demos at Citrix TV.

Planning your XenMobile MDM Pilot

Mobile Device Management has been around for a few years now for iPads and Androids devices, and of course BlackBerry has been doing BES for much longer. I have been doing a few MDM installs recently with Citrix XenMobile MDM. This is now in version 8.6 and was already in version 7 when Citrix purchased Zenprise, one of the market leaders in December 2012.

If you’re looking at deploying Citrix XenMobile MDM in a pilot make sure you check through the installation guide, the References Architecture and the MDM Deployment kit if you can get your hands on one. These will help you plan for the infrastructure you need to put in place.

You also need to decide the limits of your POC. Do you just want to look at the device management, security and inventory? Or do you want the whole Enterprise solution with your own corporate app store, micro-vpn into the LAN and secure apps that you can sandbox and have full control over?

For Enterprise MDM, Citrix have bundled ShareFile Enterprise which make the whole solution even more appealing if you want to enable secure file access into your corporate shares and encrypted ShareFile repository. Indeed, the combined features of XenMobile MDM, Worx corporate app store and ShareFile make the enterprise solution very appealing as it would take 2-3 other vendors’ products to do all of these.

Some questions to start you off..

  • What infrastructure servers will I need?
  • Have I got external IPs?
  • What type of devices will I need to control? (Apple, Android, Windows Mobile etc)
  • What users will I target for the pilot?
  • Will I let them use their own device?
  • Have you updated any use policies and got users to sign?
  • What are the implications for controlling personnel devices?
  • Will the project include ShareFile?
  • What SSL certs will I need?
  • Is there a budget for installation and licensing?
  • Have I got a project plan and success criteria sorted?



Once you have worked out the answer to the questions’ll need to get the following sorted out well in advance of installation.

  • External IP/ports – get your change control submitted to Firewall manager in good time.
  • DNS – make sure you have external DNS records for CAG,MDM and ShareFile.
  • SSL – You will need at least two external SSL certs or wildcard. You will also need another 2-3 internal certs for App Controller and StoreFront internally.
  • DUNS Number – Dun and Bradstreet ID from – for Apple Dev Kit
  • Apple Enterprise Developer Kit from Apple at $299 + APNS Certificate
  • NetScaler – you will need a NetScaler with virtual CAG

The last two go together, and you need to get that DUNS number 4-5 weeks before you apply for the Apple Ent. Dev kit.

When Applying for that Apple Dev Kit, make sure you are the project manager or someone who can say they have authority to purchase the kit from Apple – otherwise they won’t talk to you if you need to call support.

The Apple kit is required for pushing secure apps to iOS devices and for packaging the Worx app son iOS and Android. The Apple Push Notification Service (APNS) is required for installation. This is a certificate for your MDM server that you need to email to Citrix, then post into your Apple account to generate an APNS certificate. This is required just to install the MDM software.

If you don’t already have one –you’ll need NetScaler to provide secure access into the Worx Store which resides on the App Controller component, and the StoreFront server for XenApp/XenDesktop access. It also provides the micro-vpn for access to internal web and mail.


Beware of any documentation or sales blurb that promises that any MDM solution will work on every device with every OS. The dream of BYOD for everyone may be possible, just –  but probably with some limitations to certain functionality.

For example, HTC Desire X and 500 models with android 4.1.2 simply won’t load the Citrix Worx Mail client, while a Samsung model with 4.1.2 works perfectly. All the MDM policies work fine. Documentation for the various components in the Enterprise MDM has different supported levels of Android OS and Android SDK API for Worx apps and the micro-vpn so worth checking.

If possible, make sure your Android device has latest build and is at least in support and not End Of Life in terms of downloads and updates to core OS components.

Apple devices are easier to support as there is only one hardware platform, albeit with 2-3 iOS version out there. MDM 8.6 has support for latest iOS 7.


Citrix, (2013) MDM Editions Data Sheet [Online] Available from:

Citrix (2013) Reference Architecture for Mobile Device and App Management [Online] Available from:

Citrix (2013) Compare XenMobile to the competition [Online] Available from:

Dun and Bradstreet (2013) DUNS Number [Online] Available from:

Apple (2013) iOS Developer Enterprise Program [Online] Available from:

Backing up NetScaler

NetScaler stores its configuration in a file called “ns.conf” stored in the unix file system.

It would be good practice to take a copy of this file before any major work, version upgrades or migration of the virtual appliances to another data centre for example.

You can back up the config in two ways:

· Using the Generate Support File wizard in the GUI – I mostly use this for sending support files to Citrix.

· Using ftp or secure FTP tools like WinScp or Bitvise

I prefer to use WinSCP/Bitvise and usually install this on the Web Interface or Storefront server.

Method 1

Login to your NetScaler through the management gui.


Go to System, Diagnostics and click on Generate Support File

Click on Run, takes a minute to run. You can then click on Download to export a unix tar file

And also save the config to a text file.

image image

Click download to get the .tar file.


Click on Select to select the recent version


Select a suitable path for the backup and click on Download.


Method 2

The 2nd method, and one I prefer to use is through a Windows based ftp/secure Ftp tool


Login to the NetScaler IP with the nsroot other admin account.


This then presents you with an explorer interface into the NetScaler file system,

and of course my local PC.

Browse to a suitable location on the left pane, and then browse on the right to find the /nsconfig folder – drag the ns.conf over to the right.

**Other files called ns.conf.0 are the previous versions, which you may rename to ns.conf if required to get back to previous settings.