Citrix Workspace Mac Install Issue an Unexpected Error Occured During Installation Pleas Try Again

CTX134940

{{tooltipText}}

Error: "Unable to launch your application." When Launching Published Applications or Desktops Through Citrix Gateway

Article | How To / General Question Configuration Licensing | {{likeCount}} found this helpful | Created: {{articleFormattedCreatedDate}} | Modified: {{articleFormattedModifiedDate}}

Symptoms or Error

Citrix Gateway, formerly Citrix NetScaler Unified Gateway

• The following error is displayed  when launching published applications or desktops through Citrix Gateway: "Unable to launch your application."
• If you directly connect to the StoreFront URL, then you are able to launch the published applications or desktops without any issues.

---

Solution

There could be multiple reasons due to which a user might not be able to launch the published application or desktop through Citrix Gateway. You can learn the traffic flow and how to analyze logs in a Citrix Gateway and Storefront integrated environment by watching below video. You can find the details on some of the reasons in this article also.

Details on some of the reasons:

1. Install Latest Version of Citrix Workspace
2. User License Exhausted
3. Citrix Gateway License Type Mismatch
4. Certificate Not Linked on the ADC
5. Secure Ticket Authority Not Specified
6. FQDN of Secure Ticket Authority is Not Resolvable
7. Verify if the Secure Ticket Authority Configured on Citrix Gateway Returns STA ID
8. Verify if the same STA Servers on the Citrix Gateway Virtual Server as well as on the StoreFront Servers
9. Make Sure that Usage or Role on the StoreFront Server is Set to Authentication and HDX Routing
10. Verify Communication on port 1494/2598 from the Subnet IP/Mapped IP to the XenApp/XenDesktop Servers
11. FAS Authorization certificate has expired

Install Latest Version of Citrix Workspace App

Download and install the latest version of Citrix Workspace  to resolve this issue.

User License Exhausted

Verify if the license is exhausted on Citrix Gateway. Navigate to ADC configuration utility > Citrix Gateway > Virtual Server and examine the Maximum Users and Current Users. If you notice that both values are the same then the Citrix Gateway license is exhausted.

You can also navigate to ADC configuration utility > System > Licenses to confirm the number of Citrix Gateway and ICA licenses.

Complete one of the following steps to resolve this issue:

Install an additional Universal License to accommodate more users. Adjust the maximum number of users to match the new number of total users by navigating to Citrix Gateway > Global Settings > Change Authentication AAA Settings > Maximum Number of Users.
Note: Retain Citrix Gateway virtual server in SmartAccess mode.

Citrix Gateway License Type Mismatch

Citrix Gateway setting should match with the type of license that Citrix Gateway has. Change the NetScaler Gateway virtual server mode from SmartAccess to Basic . If Basic mode is used under Citrix Gateway virtual server (ICA Only checkbox checked in latest versions of ADC) then unlimited ICA users are allowed.
Refer to CTX125567 - How to Configure NetScaler Gateway Appliance with Unlimited ICA Connections for more information.

Certificate Not Linked on the ADC

When users launch the published application or desktop, the Workspace would perform an SSL handshake with the Citrix Gateway virtual server. If the certificate has been issued by a Trusted CA, make sure that the certificate is also on the ADC. For more information refer to CTX114146 - How to Install and Link Intermediate Certificate with Primary CA on Citrix Gateway.

Secure Ticket Authority Not Specified

Verify if Citrix Gateway has Secure Ticket Authority (STA) specified under Citrix Gateway > Virtual Server > Published Application. If not, add the STA under Published Applications on Citrix Gateway to resolve this issue. For more information refer to Citrix Documentation - Configuring the Secure Ticket Authority on NetScaler Gateway .

FQDN of Secure Ticket Authority is Not Resolvable

Verify if FQDN of STA server is resolvable. If not, change the STA server FQDN to IP address on StoreFront and Citrix Gateway. For more information refer to Citrix Documentation - Configuring the Secure Ticket Authority on Citrix Gateway .

Verify if the Secure Ticket Authority Configured on Citrix Gateway Returns STA ID

If the Secure Ticket Authority Server is reachable through the ADC, then it would send a POST request to the STA Server requesting for an AuthID. The Secure Ticket Server (STA) should return a valid as well as a unique AuthID.

Verify if there aresame STA Servers on Citrix Gateway Virtual Server as well as on the StoreFront Servers

The StoreFront Server needs to contact the Secure Ticket Authority Server to obtain a ticket that will have the IP address/ FQDN of the XenApp/ XenDesktop server that will be able to serve the request for that published application/desktop.

When the ticket is forwarded from the Client to the Citrix Gateway, it would match the AuthID in the ticket with the AuthID for the STA server specified on the virtual server. If the AuthID does not match, then the launch request would fail.

Make Sure that Usage or Role on the StoreFront Server is Set to Authentication and HDX Routing

Starting StoreFront version 3.5, you would be able to define the Secure Ticket Authority Servers only when you select the Usage or Role as Authentication and HDX Routing under Manage Citrix Gateway Settings. Also, if this option is not selected, then the StoreFront Server would not add the SSL Proxy Host in the Ticket created by the Secure Ticket Authority Server.

Verify Communication on port 1494/2598 from the Subnet IP/Mapped IP to the XenApp/XenDesktop Servers

The ADC will communicate with the XenApp/XenDesktop server on port 1494 (Session reliability OFF) or port 2598 (Session reliability ON). If the SNIP/MIP is not able to establish a TCP connection on the preceding mentioned ports, then the launch would fail.

---

Additional Resources

You can now use the Application probing feature to proactively monitor the health of applications enabling you to fix issues before the user actually experiences them. For more information refer to Citrix Documentation - Application probing."

Citrix Documentation -  Citrix Gateway License Types

Citrix Blog - NetScaler Gateway Licensing Demystified

---

walshrambeens.blogspot.com

Source: https://support.citrix.com/article/CTX134940