App Controller 9.0 Rolling Patch 5

Package name:?? onprem_Patch_9.0.0_97082.bin
For: App Controller Version 9.0.0
Deployment type: On-premises only??
Replaces:?? onprem_9.0.0.97077.bin, onprem_9.0.0.97075.bin, onprem_9.0.0_97073.bin, onprem_9.0.0_97059.bin
Date:?? November, 2015
Languages supported:?? English (US)
Readme version:?? 1.00

Readme Revision History

Important Notes about This Update

Note: As a best practice, Citrix recommends that you install this and other updates only if you are affected by the specific issues they resolve.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see?? Installing App Controller?? on the Citrix Product Documentation site.

Known Issue in this Release

1. When you attempt to upload an application whose name contains a forward slash ("/") to App Controller, the following error message appears:

   "Not a valid name. Some special characters are not allowed."

   As a workaround, remove the forward slash from the name and replace it with an underscore ("_") or hyphen ("-").

   [From onprem_Patch_9.0.0_97082.bin][#604224]

New Fixes in This Update

1. Attempts to upload an iOS app, mPilot, to App Controller result in the error message, "Invalid package type for the selected app." This is caused by an error that occurs when interlaced images are used for icons.

   [From onprem_Patch_9.0.0_97082.bin][#592748]

2. While attempting to add a URL to the Windows App Store (Apps & Docs > Public App Stores > Configure App), the following error message appears when you click Fetch Details:

   "Failed to fetch details from app store."

   [From onprem_Patch_9.0.0_97082.bin][#593316]

3. When adding Microsoft Lync 2013 for an iPad device from the app store, the icon might not appear; instead a chain icon appears.

   [From onprem_Patch_9.0.0_97082.bin][#593566]

4. Attempts to update an existing Android application package (.apk) file might fail.

   [From onprem_Patch_9.0.0_97082.bin][#601710]

Fixes from Replaced Releases

1. Provisioning of Sharefile users by AppController might fail due to changes in ShareFile’s mandatory password requirements.

   Note:?? Applying this patch prevents future occurrences of this error. If you have tried to provision users for ShareFile using AppController and failed due to this issue, remove those users from the ShareFile group in Active Directory and add them again after applying this patch.

   [From onprem_Patch_9.0.0_97077.bin][#582488]

2. The secondary node in a high availability pair might unexpectedly enter recovery mode, intermittently, after the patch onprem_9.0.0_97075.bin is applied.

   [From onprem_Patch_9.0.0_97077.bin][#582513]

3. The query for changes in the automatic synchronization process is not returned from Active Directory. When this occurs, automatic synchronization is blocked. This fix reduces the?? number of such occurrences by increasing the default timeout value for the active directory read time. Should you want to customize the default value, do the following:

   1. From the App Controller administrative portal at https://<AppC>:4443/admin and then select Configuration from the View drop down menu.
   2. Select?? System?? >?? File Editor.
   3. From the File Editor menu, choose?? ApplicationResources.properties?? and then select?? Go.
   4. Scroll to the bottom of the list and locate the entry,?? activedirectory.read.timeout.ms.
   5. Modify the default value (30000 ms) and click?? Save. Select?? Yes?? in the confirmation page. ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ??

   [From onprem_9.0.0.97075.bin][#545354]

4. If a user is removed from Active Directory and then added back, a duplicate user account is created but when the user logs on, the apps do not appear in the Worx store as long as the duplicate account exists. This release adds a new flag that allows you to remove duplicate user accounts from App Controller. To do this:

   1. Locate the flag in the App Controller administrative portal at https://<AppC>:4443/admin and then by selecting?? Configuration?? from drop down menu.
   2. Select?? System > File Editor.
   3. From the File Editor menu, choose?? ApplicationResources.properties?? and then select?? Go.
   4. Scroll to the bottom of the list and locate the entry,?? duplicate.user.removal.enabled.??
      The default flag value for this property is "false." Setting the flag to "true" enables the daily cleanup task. This task runs every day at 2:30 AM until the flag is set to "false." Please note that this can add extra overhead on the system. Citrix recommends setting the flag to "false" unless users cannot access their apps. When the flag is set to "false" the cleanup task does not run.
   5. Click?? Save. Select?? Yes?? in the confirmation page.
   6. After the cleanup task runs and is complete, users need to reenroll their devices.

   Note:?? If you modify any parameters in the property list, the total count of the properties decrements by 2. This is not an issue.

   [From onprem_9.0.0.97075.bin][#546287]

5. If you create, update or delete more than 1000 objects (users or groups) in Active Directory within five minutes, App Controller only retrieves the first 1000 objects during automatic synchronization.

   [From onprem_9.0.0.97075.bin][#555333]

6. In a high availability deployment, the secondary App Controller can unexpectedly go into Recovery Mode.

   [From onprem_9.0.0.97075.bin][#557451]

7. When uploading an app, if the app name contains a special character, such as a period ("."), an error appears that prevents uploading the app.

   [From onprem_9.0.0.97075.bin][#562658]

8. If automatic synchronization fails, newly added users do not appear in the?? View Group Members?? dialog box on the?? Roles?? tab.

   [From onprem_9.0.0.97075.bin][#564833]

9. The error message "Invalid Username or Password" appears when the ShareFile administrator password contains the following special characters:

   • A percent (%) sign before a number, such as Citrix%123
   • A plus (+) sign, such as Citrix+123 or Citrix123+

   [From onprem_9.0.0.97075.bin][#566703, #567174]

10. With this release, the option?? Worx PIN Attempts?? appears by default in Support Options.

    [From onprem_Patch_9.0.0_97073.bin][#489965]

11. The Worx Store does not detect upgrades to Android apps that are not wrapped with the MDX Toolkit.

    [From onprem_Patch_9.0.0_97073.bin][#497341]

12. After applying this patch, you can delete new custom keys that contain spaces at the end of the name. However, any keys you created with spaces at the end of the name before applying the patch cannot be deleted.

    [From onprem_Patch_9.0.0_97073.bin][#497349]

13. Attempts to upload an iOS file to App Controller results in the error message "Invalid package type for the selected app." This is caused if a key in the .ipa file where it looks for icons is either missing or if the key has a new name.

    [From onprem_Patch_9.0.0_97073.bin][#511292, #552375]

14. The App Controller console collects one day of logs where the command-line interface collects five days of logs.

    [From onprem_Patch_9.0.0_97073.bin][#512388]

15. LDAP cannot be configured when the domain name includes an underscore (_).

    [From onprem_Patch_9.0.0_97073.bin][#524299]

16. When saving a long user display name, App Controller adds a space to the name. When users attempt to log on to Worx Home, the error message "Either user is not found in the system or user doesn’t have entitled apps" appears in the logs.

    [From onprem_Patch_9.0.0_97073.bin][#550440]

17. If the ShareFile administrator password contains a percent (%) sign, when the?? Sync?? button is clicked, the error message "Failed to contact ShareFile. Error Message: Username or Password was incorrect" appears.

    [From onprem_Patch_9.0.0_97073.bin][#551606]

18. Attempts to logon to Worx Home through NetScaler Gateway or directly with Receiver, users receive repeated prompts for the personal identification number (PIN) and then the logon attempt fails.

    [From onprem_Patch_9.0.0_97059.bin][#536292]

19. When uploading and then making changes to apps, App Controller unexpectedly logs off and the configuration changes are not saved.

    Important:?? Before applying this patch to App Controller, delete the app. After applying the patch, reinstall the app.

    [From onprem_Patch_9.0.0_97059.bin][#540337]

20. After creating an APK file with Apktool 2.0.0 RC4, attempts to upload the file fails with the error message "Invalid package type for the selected app." If your environment contains Device Manager and you get the message "Unknow error" in App Controller, you must apply Device Manager Patch_900_9954. Additional details about Patch_900_9954 are in the article?? CTX142467?? on the Citrix Support web site.

    [From onprem_Patch_9.0.0_97059.bin][#541389]

Installing This Update

You can use this procedure to upgrade your existing App Controller deployment, install new application connectors, and install any updates, such as upgrades or patches, that become available for App Controller.

Important:?? Make sure to take a snapshot of your App Controller configuration before you install the patch.

Depending on your environment, install this patch by using one of the following three installation instructions.

To install the patch on a single App Controller

1. In the App Controller management console, click?? Settings.

2. Under?? System Configuration, click?? Release Management.

3. Click?? Upgrade.

4. In the?? Upgrade?? dialog box, click?? Browse?? and then navigate to the installation package on your computer.

5. Click?? Open?? and then click?? Upload.

   The file uploads to App Controller.

6. If prompted, restart App Controller.

   In this case, a message indicates that the installation was successful.

To install the patch where App Controller is running in a high availability pair

In this procedure, the primary node is called A and the secondary node is B.

1. Shut down node B in the high availability pair.

2. Upgrade node A by using the instructions in "To install the patch on a single App Controller."

3. When the upgrade is finished, restart node A and then shut down node A.

4. Start node B, repeat Step 2 for node B. When the upgrade is finished, restart node B and then shut down node B.

5. Start A node. When you start node A, it becomes the primary node.

6. Start B node. When you start node B, it becomes the secondary node.

7. After you upgrade and restart both nodes, the VMs automatically join to create the high availability pair.

To install the patch in a cluster environment

1. If the cluster head is in a high availability pair, shut down the the cluster head in the high availability secondary node first.

2. Upload the .bin file to the cluster head primary node and all service nodes.

3. Shutdown all of the nodes after successfully uploading the bin file.

4. Bring up the cluster head secondary node which is now the new cluster head primary node.

5. Upload the .bin file and after the upload is successful, shutdown the node.

6. After successful migration of the new cluster head primary node, start all the nodes, one after another, that were shutdown in Step 3.

7. Bring up the cluster head secondary node.

To validate the installation:

• After installing this patch, view ControlPoint >?? Settings?? >?? Overview?? >?? Patch Info. Information about the most recent successful patch installation is displayed there.

• To view the entire patch inventory, view ControlPoint >?? Release Management >?? Updates.