Configuring Citrix Receiver for Android with CloudGateway2.5/2.6

By Arun Krishnan · Published February 28, 2013 · 12 Comments

Tags: android · cloudgateway · Device Management · Mobility · vpn

Products: Access Gateway · Citrix Receiver · CloudGateway · Mobility

This article provides information on typical configuration issues that one may face while making Citrix Receiver work with Cloud Gateway. This focusses on what a Citrix Admin needs to do when various errors happen in Citrix Receiver for Android and working with @Work Apps for Android. This blog provides insights to resolve the following issues that one would see.

1. I get an error indicating “Citrix receiver could not check the state of you device. Contact your administrator.”

2. Unable to launch the Web/SaaS apps when VPN is connected

3. I get an error “This application was removed from Citrix Receiver. Delete this app from your device or re-install it using Citrix Receiver.” when starting a Mobile App in Android

4. I get an error indicating “Citrix Receiver cannot apply security policies to this app. You can try installing the app again, or contact your administrator”

1. Get an error “Citrix receiver could not check the state of you device. Contact your administrator”

This typically happens when there is a misconfiguration that has been done on the AG. Please ensure that you read through the documentation available at http://support.citrix.com/proddocs/topic/appcontroller-26/clg-appc-device-mgmt-storefront-tsk.htm

Log on to Access Gateway by using a Secure Shell (SSH) connection, such as from PuTTY.
At the command prompt, type: bind vpn global -appController https://<AppControllerFQDN> where AppControllerFQDN is the AppController web address.
Log off from Access Gateway and return to the command prompt on the computer running IIS.

Once the above is done make sure all the users have been logged off from Access Gateway before retrying. This is applicable to AG AG 10.0.71.6014.e.nc

2. Unable to launch the Web/SaaS apps when VPN is connected

Inorder to be able to launch a web/SaaS apps from @WorkWeb or a built in Web browser in Citrix receiver, please ensure that the following is configured on Access Gateway.

1. First and foremost, please go to the Access Gateway Admin console and under DNS Node, choose Named Servers

Ensure that all the servers are enabled and Effective State for all the DNS Servers are shown UP with a Green bubble.

2. Ensure that the FQDN of all the internal and external Web/SaaS apps that you want users to access are resolvable from this DNS Server that is configured.

3. If you have Split Tunnel ON configured on your Access Gateway Virtual Server, then ensure that “Intranet Application” routes are configured appropriately and this policy is bounded with the Virtual server.

4. You need to ensure that the Intranet application route list encompasses AppController IP, Exchange Server IP, Intranet IPs.

Under Access Gateway admin console, you can navigate to the node (on the left pane) ” Access Gateway>>Resources>>Intranet Applications” . Here the IP Routes that are defined must include the IP Addresses of AppController, Exchange server (in case you choose to use @WorkMail), and all the IPs of internal application websites that you would be accessing as a WebApp.

Post this please ensure that you bind these settings on your virtual server on AG.

5. If there is a firewall between AG and the internal interwork, we need to ensure that port 443 and DNS resolution port are open. This is to enable DNS resolution for all the FQDN that users would be trying to access from the Citrix Receiver or Mobile apps over VPN.

3. I get an error “This application was removed from Citrix Receiver. Delete this app from your device or re-install it using Citrix Receiver.” when starting a Mobile App in Android

This typically happens where the deployment consists of AccessGateway <-> Windows StoreFront 1.2 <-> App Controller (2.5/2.6)

1. This is a known issue and please ensure that when configuring Delivery points for the Store on Windows StoreFront Admin console, please have the Display name without any space or special characters. Please use ONLY Alphanumeric chars for the display name.

4. I get an error indicating “Citrix Receiver cannot apply security policies to this app. You can try installing the app again, or contact your administrator”

This typically happens if you are using Windows Storefront for aggregation for all Windows/Mobile/Web/SaaS apps. Please ensure that you follow the steps mentioned in the documentation present at http://support.citrix.com/proddocs/topic/appcontroller-26/clg-appc-device-mgmt-storefront-tsk.html

This involves modifying the web.config file on Storefront server.

12 Comments

Reinhard Teischl

on 2 months ago · Reply

Could you please explain this further?

” 4. You need to ensure that the Intranet application route list encompasses AppController IP, Exchange Server IP, Intranet IPs.”

The Web/SaaS App is created on the AppController. Which routes are needed on the NS? Do you mean Network – Routes on the NS?

Arun Krishnan

on 2 months ago · Reply

Hi Reinhard, Under Access Gateway admin console, you can navigate to the node (on the left pane) ” Access Gateway>>Resources>>Intranet Applications” . Here the IP Routes that are defined must include the IP Addresses of AppController, Exchange server (in case you choose to use @WorkMail), and all the IPs of internal application websites that you would be accessing as a WebApp.

Post this please ensure that you bind these settings on your virtual server on AG.
- Ueli Beyeler
  
  on 2 months ago · Reply
  
  Hi Arun,
  I am also very confused about the Access Gateway Settings needed for StoreFront/Appcontroller integration. We have a (working) configuration with Storefront and have integrated Appcontroller (CAG->StoreFront->Appcontroller). The Apps (WEB/SAAS, @WorkMail/@WorkWeb) are displayed in Mobile Receiver, but can not be startet (Gateway Timeout for Web, no download for @Workxxx).
  You say, that the Route to Appcontroller need to be configured on CAG. But I thought that all the traffic is routed via Storefront in this Config.
  
  Any cearification would be very much appreciated!
  
  Thanks

Reinhard Teischl

on 2 months ago · Reply

Hi Arun,

wow! Dont you think that this is a really important details when integrating AppController with AG? Why isnt that anywhere documented on edocs?

Thanks.

GeraldB

on 2 months ago · Reply

I implemented these recommendation and now my Android devices not only fail to add/launch the @work apps, but I cannot now add or launch any Windows apps either. I just get the error ” Citrix Receiver could not check the state of your device……” .

From bad, to much much worse.

The instructions on eDocs are terrible and very nebulous. I have put my IIS server and AGEE back to how they were and my Android devices still fail.

There is a shocking lack of decent detailed information about how to integrate AGEE/SF/AC with native Receiver and rfWeb, and dont even get me started on ShareFile integration. And when you do get it all configured there is no consistency between native Receiver and rfWeb, you can pick any two of Docs/Apps/Desktops tabs….but just dont expect these to be consistent across Receivers !!

Citrix ought to be ashamed of this whole debacle.

Albert Alvarez

on 2 months ago · Reply

Gerald sorry to hear you are having issues with your environment. I would like to take a look at your deployment to understand what went so wrong.
Ping me if you agree.
Albert.Alvarez@citrix.com

GeraldB

on 2 months ago · Reply

….and dont even mention the WorkSpace Control gotcha list !!

WSC only seems to work consistently between devices if its 20% humidity, the wind is blowing from the north east, there is a J in the name of the current month, the moon is in Saggitarius and you had Fallafel for lunch with a side order of curly fries.

Subhash Chandra Bose Kaja

on 2 months ago · Reply

This is a fantastic blog Arun has created, It was very useful to me in multiple POCs, i dont have to really remember anything, i can directly come to this blog for solutions / hints to get it fixed. Appreciate this effort, If i come across any new issues, I wish to contribute to this blog. Thank you Arun.

on 1 month ago · Reply

Mr. Krishnan,

On a Galaxy Nexus (4.2.2), I receive a ” Citrix Receiver could not register your device: Invalid device management database. Try installing Receiver again.”

This is a NetScaler, AG, Storefront, AppController environment and all eDocs and blogs have been followed to the letter.

Tobias

on 1 month ago · Reply

The web.conf modifications seem to break the Android clients. Just removed them and it works again. Citrix, where is your quality control?
- Greg
  
  on 4 weeks ago · Reply
  
  Removing the lines breaks receiver. The proper thing to do is verify over again your web.conf and the associated networking/ACLs. Once you have it verified open a support case and have a second set of eyes look it over. Its likely one of those two things causing the issue. It can be even more frustrating when some types of devices, iOS, work and others, Android, dont.

developer launch

on 1 month ago · Reply

Magnificent web site. A lot of useful information here. Im sending it to a few pals ans also sharing in delicious. And certainly, thanks for your effort!

Reinhard Teischl

on 2 months ago · Reply

Could you please explain this further?

” 4. You need to ensure that the Intranet application route list encompasses AppController IP, Exchange Server IP, Intranet IPs.”

The Web/SaaS App is created on the AppController. Which routes are needed on the NS? Do you mean Network – Routes on the NS?
- Arun Krishnan
  
  on 2 months ago · Reply
  
  Hi Reinhard, Under Access Gateway admin console, you can navigate to the node (on the left pane) ” Access Gateway>>Resources>>Intranet Applications” . Here the IP Routes that are defined must include the IP Addresses of AppController, Exchange server (in case you choose to use @WorkMail), and all the IPs of internal application websites that you would be accessing as a WebApp.
  
  Post this please ensure that you bind these settings on your virtual server on AG.
  - Ueli Beyeler
    
    on 2 months ago · Reply
    
    Hi Arun,
    I am also very confused about the Access Gateway Settings needed for StoreFront/Appcontroller integration. We have a (working) configuration with Storefront and have integrated Appcontroller (CAG->StoreFront->Appcontroller). The Apps (WEB/SAAS, @WorkMail/@WorkWeb) are displayed in Mobile Receiver, but can not be startet (Gateway Timeout for Web, no download for @Workxxx).
    You say, that the Route to Appcontroller need to be configured on CAG. But I thought that all the traffic is routed via Storefront in this Config.
    
    Any cearification would be very much appreciated!
    
    Thanks
Reinhard Teischl

on 2 months ago · Reply

Hi Arun,

wow! Dont you think that this is a really important details when integrating AppController with AG? Why isnt that anywhere documented on edocs?

Thanks.
GeraldB

on 2 months ago · Reply

I implemented these recommendation and now my Android devices not only fail to add/launch the @work apps, but I cannot now add or launch any Windows apps either. I just get the error ” Citrix Receiver could not check the state of your device……” .

From bad, to much much worse.

The instructions on eDocs are terrible and very nebulous. I have put my IIS server and AGEE back to how they were and my Android devices still fail.

There is a shocking lack of decent detailed information about how to integrate AGEE/SF/AC with native Receiver and rfWeb, and dont even get me started on ShareFile integration. And when you do get it all configured there is no consistency between native Receiver and rfWeb, you can pick any two of Docs/Apps/Desktops tabs….but just dont expect these to be consistent across Receivers !!

Citrix ought to be ashamed of this whole debacle.
- Albert Alvarez
  
  on 2 months ago · Reply
  
  Gerald sorry to hear you are having issues with your environment. I would like to take a look at your deployment to understand what went so wrong.
  Ping me if you agree.
  Albert.Alvarez@citrix.com
GeraldB

on 2 months ago · Reply

….and dont even mention the WorkSpace Control gotcha list !!

WSC only seems to work consistently between devices if its 20% humidity, the wind is blowing from the north east, there is a J in the name of the current month, the moon is in Saggitarius and you had Fallafel for lunch with a side order of curly fries.
Subhash Chandra Bose Kaja

on 2 months ago · Reply

This is a fantastic blog Arun has created, It was very useful to me in multiple POCs, i dont have to really remember anything, i can directly come to this blog for solutions / hints to get it fixed. Appreciate this effort, If i come across any new issues, I wish to contribute to this blog. Thank you Arun.
Al

on 1 month ago · Reply

Mr. Krishnan,

On a Galaxy Nexus (4.2.2), I receive a ” Citrix Receiver could not register your device: Invalid device management database. Try installing Receiver again.”

This is a NetScaler, AG, Storefront, AppController environment and all eDocs and blogs have been followed to the letter.
- Tobias
  
  on 1 month ago · Reply
  
  The web.conf modifications seem to break the Android clients. Just removed them and it works again. Citrix, where is your quality control?
  - Greg
    
    on 4 weeks ago · Reply
    
    Removing the lines breaks receiver. The proper thing to do is verify over again your web.conf and the associated networking/ACLs. Once you have it verified open a support case and have a second set of eyes look it over. Its likely one of those two things causing the issue. It can be even more frustrating when some types of devices, iOS, work and others, Android, dont.
developer launch

on 1 month ago · Reply

Magnificent web site. A lot of useful information here. Im sending it to a few pals ans also sharing in delicious. And certainly, thanks for your effort!

12 Comments

Post a Comment

Featured Products

Featured Bloggers

Featured Tags

Popular Posts