XenMobile Server 10.8.0 Rolling Patch 7

Package name: xms_10.8.0.10702.bin

For: XenMobile Server 10.8.0

Deployment type: On-premises only

Replaces: xms_10.8.0.10602.bin, xms_10.8.0.10506.bin, xms_10.8.0.10402.bin, xms_10.8.0.10309.bin, xms_10.8.0.10212.bin, xms_10.8.0.10104.bin

Date: June, 2019

Languages supported: English (US)

Readme version: 1.00

Readme Revision History

Version Date Change Description
1.00 June, 2019 Initial release

Important Notes about This Update

As a best practice, Citrix recommends that you install this and other updates only if you are affected by the specific issues they resolve.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see XenMobile Server 10.8 on the Citrix Product Documentation site.

What’s new

For information about XenMobile Server 10.8.0 Rolling Patch 6 release, see XenMobile Server 10.8.0 Rolling Patch 6.

Known Issue(s) in this Release

The following error message displays when you attempt to configure a Public App by using the new app URL from the Apple Store: “Could not find the app you entered. Check the URL and try again.”

Refer to the workaround in https://support.citrix.com/article/CTX256704.

[From xms_10.8.0.10702.bin][CXM-68898]

New Fixes in This Update

  1. Apple Volume Purchase Program (VPP) apps don’t import into XenMobile Server. This issue occurred after Apple changed the URL for apps from itunes.apple.com to apps.apple.com.

    [From xms_10.8.0.10702.bin][CXM-68617]

  2. The Secure Hub Apple Push Notification Service (APNs) certificate for XenMobile Server 10.10 will expire on August 2, 2019. As a result, the Agent Notification fails and the application push might be delayed on iOS devices.

    With this update, the Secure Hub APNs certificate will be renewed and will expire on July 12, 2020.

    [From xms_10.8.0.10702.bin][CXM-68618]

Fixes From Replaced Releases

  1. If you deployed a Store device policy for iOS/Android/Windows 10 Desktop and Tablet devices before upgrading to 10.8 Rolling Patch 6: When a user clicks the iOS/Android/Windows store link in the Start menu, the message “500 Internal Server Error” or “HTTP Status 401 – Either you have reached an old URL or this device is not registered” appears. To resolve this issue, you must recreate and deploy your Store device policy.

    [From xms_10.8.0.10602.bin][CXM-66015]

  2. Added support in XenMobile Server CLI to validate public key infrastructure (PKI) and SQL passwords before you begin a migration.

    [From xms_10.8.0.10602.bin][CXM-66017]

  3. You are unable to deploy VPP apps and media to new VPP users on devices running iOS.

    [From xms_10.8.0.10602.bin][CXM-66021]

  4. Configure valid VPP token on XenMobile Server and purchase new VPP books from Apple VPP portal. The newly added media books are not synced and do not appear on the console.

    [From xms_10.8.0.10602.bin][CXM-66104]

  5. With no https proxy configured, admins cannot send SMS messages through the Nexmo SMS gateway.

    [[From xms_10.8.0.10506.bin][CXM-54471]

  6. You can’t use the public REST API to deploy delivery groups.

    [From xms_10.8.0.10506.bin][CXM-55210]

  7. Third-party B2B VPP Secure apps don’t show as installed in Secure Hub.

    [From xms_10.8.0.10506.bin][CXM-55891]

  8. After updating from XenMobile 10.6 to 10.8 RP1, the web console sometimes becomes unresponsive after an admin logs in. An error message displays “TypeError: this.featureFlags is undefined”.

    [From xms_10.8.0.10506.bin][CXM-56003]

  9. For Android devices, when the server property “device.properties.userDefined1” is not set, adding a value to the User Defined#1 device details property does not display properly.

    [From xms_10.8.0.10506.bin][CXM-56004]

  10. Enterprise apps don’t silently upgrade on supervised devices running iOS 11.4 or later.

    [From xms_10.8.0.10506.bin][CXM-56005]

  11. After adding a custom property with a special character, admins cannot access the Devices page on the XenMobile console.

    [From xms_10.8.0.10506.bin][CXM-56007]

  12. Admins can’t change the DEP setting “Require credentials for device enrollment” in XenMobile 10.7 if the DEP account is an edu organization. The option is always enabled and can’t be turned off.

    [From xms_10.8.0.10506.bin][CXM-56009]

  13. For Android devices, the Device administrator disabled property is missing when you navigate to Device management > Device > Properties .

    [From xms_10.8.0.10506.bin][CXM-56049]

  14. When StoreFront is integrated with XenMobile Server, non-primary domains cannot enroll.

    [From xms_10.8.0.10506.bin][CXM-56206]

  15. When you enroll a device in the Profile Owner mode, the Android Enterprise apps are not available.

    [From xms_10.8.0.10506.bin][CXM-55963]

  16. While editing an app in the app store that contains a special character in the description, the 500 Internal Server Error appears.

    [From xms_10.8.0.10506.bin][CXM-56351]

  17. To prepare for device upgrades to iOS 12: The Citrix VPN connection type in the VPN device policy for iOS doesn’t support iOS 12. Delete your VPN device policy and create a new VPN device policy with the Citrix SSO connection type.

    The Citrix VPN connection continues to operate in previously deployed devices after you delete the VPN device policy. Your new VPN device policy configuration takes effect in XenMobile Server 10.8 RP5, during user enrollment.

    [From xms_10.8.0.10506.bin][CXM-55893]

  18. The Secure Hub Apple Push Notification Service (APNs) certificate for XenMobile Server 10.8 will expire on September 8, 2018. As a result, the Agent Notification fails and the application push might be delayed on iOS devices.

    With this update, the Secure Hub APNs certificate will be renewed and will expire on August 2, 2019.

    [From xms_10.8.0.10402.bin][CXM-53213]

  19. On the Analyze > Dashboard page, the Installed Apps graph and report show incorrect BluPrint app version numbers.

    [From xms_10.8.0.10309.bin][CXM-37939]

  20. As a workaround provided by a third-party component, it is a prerequisite to have a license file with the sort keyword in the file.

    After upgrading to XenMobile Server 10.7 or later and enrolling a device, the license count shown in the XenMobile console is much greater than the actual number of enrolled devices.

    [From xms_10.8.0.10309.bin][CXM-40533]

  21. When trying to configure the Salesforce SAML app with provisioning enabled from the XenMobile Server 10.8.0 console, the XenMobile console displays the “Invalid Application details, please try again” error message.

    [From xms_10.8.0.10309.bin][CXM-47853]

  22. Create a credentials provider ( Settings > Credential Providers), with the default notification template selected on the Renewal tab. When you return to Settings > Credential Providers and go directly to the Renewal tab, the Notification template shows None instead of the template previously specified. As a workaround, when you return to Settings > Credential Providers, click Next to navigate to the Renewal tab.

    [From xms_10.8.0.10309.bin][CXM-48908]

  23. When you change the Store name in XenMobile Server, a warning message asking the iOS users to log off and log on to the Secure Hub might not appear. As a result, when the user accesses the Secure Hub Store, the MDM-pushed apps are uninstalled from the device.

    [From xms_10.8.0.10309.bin][CXM-49223]

  24. After you restart XenMobile Server, your settings in the Log Settings page revert to the defaults.

    [From xms_10.8.0.10309.bin][CXM-49335]

  25. Syslog messages now include the XenMobile Server/Node IP address.

    [From xms_10.8.0.10309.bin][CXM-49370]

  26. When you attempt to add a URL that begins with “http” or “https” but does not contain the “.com” or file name extension to Web Content Filter policy, the following error message appears: “Please enter a valid FQDN or an http:// or https:// URL.”

    [From xms_10.8.0.10309.bin][CXM-50019]

  27. In XenMobile Server, certain iOS apps’ version numbers are reported incorrectly.

    [From xms_10.8.0.10309.bin][CXM-50640]

  28. The German expiration notification message for a VPP account is incorrect.

    [From xms_10.8.0.10309.bin][CXM-50991]

  29. When users who are enrolled in XenMobile Server through “email enrolment” attempt to change the User Principal Name (UPN) in Active Directory, the device goes to an unmanaged state causing an App Wipe/Lockout.

    However, when the user attempts to re-enroll with the new UPN, the users are directed back to the First Time Use (FTU) screen.

    To enable the fix, set the custom server property “refresh.user.using.objectguid” to “true”.

    [From xms_10.8.0.10309.bin][CXM-51704]

  30. The devices running on Microsoft Windows operating system such as Windows phone and desktop/tablet might fail to search the public store apps and the following error message appears: “Application search Failed”.

    [From xms_10.8.0.10309.bin][CXM-52555]

  31. On devices running iOS 11.3, when multiple apps are installed and marked as required apps on non-supervised devices, you may receive repeated “Update Available” notifications.

    [From xms_10.8.0.10212.bin][CXM-49783]

  32. The XenMobile console doesn’t accept valid Google play credentials for Android. The following error message appears: “The Google Play logon request used a user name or password that is not recognized.”

    [From xms_10.8.0.10212.bin][CXM-50257]

  33. When you change users to a different Active Directory security group: For enrolled iOS devices, XenMobile Service does not detect the change, update the delivery group membership, or push new policies to the devices.

    [From xms_10.8.0.10104.bin][CXM-47370]

Installing This Update

Note: If your system is configured in cluster mode, follow the steps below to update each node, one after the other.

Important: Before installing this update, take a snapshot of the current settings and create a backup of the database.

  1. Log on to your account on the Citrix website and download the XenMobile Server update (.bin) file to an appropriate location.
  2. In the XenMobile Server Console of a node click Settings > Release Management. The Release Management page appears, which displays the currently installed software version, as well as a list of any updates, patches, and upgrades you have already uploaded.
  3. Under Release Management, click Update. The Update dialog box appears.
  4. Click Browse to upload the update (.bin) file you have downloaded from support.citrix.com.
  5. Click Update and then if prompted, restart the XenMobile Server node using command line.

To verify the patch deployment

After installing this patch, log on to the XenMobile Server Console as an administrator, then navigate to Settings > Release Management > Updates. Information about the most recent successful patch installation appears in this section.


  • No Related Posts

Leave a Reply