XenMobile Server 10.9.0 Rolling Patch 4

Package name: xms_10.9.0.10405.bin

For: XenMobile Server 10.9.0

Deployment type: On-premises only

Replaces: xms_10.9.0.10303.bin, xms_10.9.0.10204.bin, xms_10.9.0.10105.bin

Date: June, 2019

Languages supported: English (US)

Readme version: 1.00

Readme Revision History

Version Date Change Description
1.00 April, 2019 Initial release

Important Notes about This Update

As a best practice, Citrix recommends that you install this and other updates only if you are affected by the specific issues they resolve.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see XenMobile Server 10.9 on the Citrix Product Documentation site.

What’s new

Lock and reset password for Android Enterprise. XenMobile Server now supports the Lock and Reset password security action for Android Enterprise devices enrolled in work profile mode running Android 8.0 and greater. See Security actions.

[From xms_10.9.0.10405.bin][CXM-66935]

For information about XenMobile Server 10.9.0 Rolling Patch 3 release, see XenMobile Server 10.9.0 Rolling Patch 3.

For information about XenMobile Server 10.9.0 Rolling Patch 2 release, see XenMobile Server 10.9.0 Rolling Patch 2.

For information about XenMobile Server 10.9.0 Rolling Patch 1 release, see XenMobile Server 10.9.0 Rolling Patch 1.

Known Issue(s) in this Release

The following error message displays when you attempt to configure a Public App by using the new app URL from the Apple Store. “Could not find the app you entered. Check the URL and try again.”

Refer to the workaround in https://support.citrix.com/article/CTX256704.

[From xms_10.9.0.10405.bin] [CXM-68587]

New Fixes in This Update

  1. Configure valid VPP token on XenMobile Server and purchase new VPP books from Apple VPP portal. The newly added media books are not synced and do not appear on the console.

    [From xms_10.9.0.10405.bin][CXM-66160]

  2. Sometimes when Secure Hub is disconnected, security actions need to be performed twice to trigger FCM notifications for an event.

    [From xms_10.9.0.10405.bin][CXM-66912]

  3. On the XenMobile Server database, the Firebase Cloud Messaging (FCM) token stays and does not change until you delete or uninstall the Secure Hub.

    [From xms_10.9.0.10405.bin][CXM-66924]

  4. The name and owner of your Android Enterprise enterprise might not display correctly in the Google Play store administrator console.

    [From xms_10.9.0.10405.bin][CXM-66934]

  5. Newly imported CA certificates are not visible in the Public-Key Interface (PKI) entries.

    [From xms_10.9.0.10405.bin][CXM-67981]

  6. When adding a VPP account (Settings > iOS Settings), the following message appears if the token exceeds 350 characters: “The entered company token is not valid, please enter a new one.”

    [From xms_10.9.0.10405.bin][CXM-68115]

  7. The Secure Hub Apple Push Notification Service (APNs) certificate for XenMobile Server 10.9 will expire on August 2, 2019. As a result, the Agent Notification fails and the application push might be delayed on iOS devices.

    With this update, the Secure Hub APNs certificate will be renewed and will expire on July 12, 2020.

    [From xms_10.9.0.10405.bin][CXM-68352]

  8. On the XenMobile Server console, the value of the client property has a character limit of 256.

    [From xms_10.9.0.10405.bin][CXM-68384]

  9. Apple Volume Purchase Program (VPP) apps don’t import into XenMobile Server. This issue occurred after Apple changed the URL for apps from itunes.apple.com to apps.apple.com. [From xms_10.9.0.10405.bin][CXM-68580]

    [From xms_10.9.0.10405.bin][CXM-68580]

Fixes From Replaced Releases

  1. When you approve a new Android Enterprise app and assign it to a delivery group in the XenMobile Server console, the app does not appear in the Play Store app on the device.

    [From xms_10.9.0.10303.bin][CXM-62612]

  2. In XenMobile Server, publish an MDX app for iOS or Android platform. The XenMobile Server Public API does not support the modification of App description in the corresponding platform.

    [From xms_10.9.0.10303.bin][CXM-63412]

  3. The default DEP components are not auto-populated in the XenMobile Server console when Require credentials for device enrollment setting is set to ON.

    [From xms_10.9.0.10303.bin][CXM-64452]

  4. When you edit Category on devices running Android Enterprise, the category does not appear in Google Play Store. This issue occurs when you navigate to Configure > Apps, select an app that you have added and then click Edit > App Category.

    [From xms_10.9.0.10303.bin][CXM-64695]

  5. In XenMobile Server console, the license count shown is not in sync with the number of enrolled devices.

    To correct the license count shown:

    • Set the server property license.clean.task.activate to true.
    • Then, a nightly clean task can be activated.

    [From xms_10.9.0.10303.bin][CXM-64730]

  6. Performing the full or partial wipe security action on devices running Android 7.0 or later does not remove the device from the XenMobile Server console. This device does not undergo a factory reset and remains listed in the console.

    [From xms_10.9.0.10303.bin][CXM-64731]

  7. If you deployed a Store device policy for iOS/Android/Windows 10 Desktop and Tablet devices before upgrading to 10.9 Rolling Patch 3: When a user clicks the iOS/Android/Windows store link in the Start menu, the message “500 Internal Server Error” or “HTTP Status 401 – Either you have reached a old URL or this device is not registered” appears. To resolve this issue, you must recreate and deploy your Store device policy.

    [From xms_10.9.0.10303.bin][CXM-64834]

  8. When you upload a Google Play app in the XenMobile Server console without adding an app icon image, and try to edit and upload a .WebP image later, the image does not appear in the apps list.

    [From xms_10.9.0.10303.bin][CXM-64849]

  9. When you enroll a device in the Profile Owner mode, the Android Enterprise apps are not available.

    [From xms_10.9.0.10303.bin][CXM-64850]

  10. You are unable to deploy VPP apps and media to new VPP users on devices running iOS.

    [From xms_10.9.0.10303.bin][CXM-65038]

  11. When you have set a non-default value to pki.xml file and then import it, the pki.xml file resets to the default value.

    [From xms_10.9.0.10204.bin][CXM-38390]

  12. When you upload Google Play services APK versions later than 11.5.09 in the XenMobile Server console, multiple “500 Internal Server Error” messages appear. The error message persists even after closing the error window.

    [From xms_10.9.0.10204.bin][CXM-59022]

  13. When you upgrade from XenMobile Server version 10.9 to 10.9 RP1, a fatal error message appears in the debug log file.

    [From xms_10.9.0.10204.bin] [CXM-59040]

  14. In the Shared devices mode for Android, you receive a prompt to install required apps even when all the required apps are installed on the device.

    [From xms_10.9.0.10204.bin] [CXM-59182]

  15. For devices enrolled with the XenMobile Server set to the MAM mode, the license count appears incorrectly and keeps increasing, resulting in a license overconsumption notification.

    [From xms_10.9.0.10204.bin] [CXM-59539]

  16. When you deploy the following policies on devices running iOS 12 or later, the Create Event calendar option does not appear:

    • Documents from managed apps in unmanaged apps [OFF]
    • Documents from unmanaged apps in managed apps [ON]

    [From xms_10.9.0.10204.bin][CXM-59603]

    Note: This is an Apple limitation and is tracked in [CXM-60708].

  17. When you enroll devices and modify the Delivery Groups, the changes do not reflect after a server refresh cycle. This occurs when public IP addresses are configured as XenMobile node IP addresses in a cluster.

    [From xms_10.9.0.10204.bin][CXM-60290]

  18. You are unable to push Provisioning profiles on to XenMobile Server version 10.8, and the device states appear as “Pending” along with the java.lang.NullPointerException error.

    [From xms_10.9.0.10204.bin][CXM-60370]

  19. When you create a Web&SaaS app through the XenMobile server console and have modified the User Account option, and try to edit the User Account option, the default value appears.

    [From xms_10.9.0.10105.bin][CXM-53722]

  20. For Android devices, when a certificate renewal does not succeed or is cancelled, checking the Delivery Group logs shows that the enrollment certificate renewal completed successfully.

    [From xms_10.9.0.10105.bin][CXM-55352]

  21. For Android devices, the Device administrator disabled property is missing when you navigate to Device management > Device > Properties.

    [From xms_10.9.0.10105.bin][CXM-56098]

  22. When you enroll a device in the Profile Owner mode, the Android Enterprise apps are not available.

    [From xms_10.9.0.10105.bin][CXM-56629]

  23. While editing an app in the app store that contains a special character in the description, the 500 Internal Server Error appears.

    [From xms_10.9.0.10105.bin][CXM-56638]

  24. When StoreFront is integrated with XenMobile Server, non-primary domains cannot enroll.

    [From xms_10.9.0.10105.bin][CXM-56640]

  25. MDX-wrapped Android apps might download slowly from the Citrix Secure Hub app store.

    [From xms_10.9.0.10105.bin][CXM-57697]

  26. When you upload a new version of MDX file through the XenMobile Server console to replace an older MDX version using a REST API call to update platform details, the new MDX version does not appear in the console.

    [From xms_10.9.0.10105.bin][CXM-57787]

  27. The ability to configure the server property max.renew_device_cert_requests.allowed is removed. By default, the number of devices on which you can request certificate renewal simultaneously is 100.

    [From xms_10.9.0.10105.bin][CXM-57830]

  28. When you create an iOS public store app and assign it to a Delivery Group and enroll the iOS device, the app fails to install.

    [From xms_10.9.0.10105.bin][CXM-58583]

  29. The following error is displayed while adding a registry key to a Windows Embedded Compact policy if the length of the registry value is more than 2048 characters:

    “Console error: could not execute statement; SQL [n/a]; nested exception is org.hibernate.exception.DataException: could not execute statement.”

    [From xms_10.9.0.10105.bin][CXM-58834]

  30. You are unable to upload Google Play services APK versions later than 11.5.09 in the XenMobile Server console.

    [From xms_10.9.0.10105.bin][CXM-58952]

  31. You are unable to import and install B2B apps delivered through Volume Purchase Program (VPP) after you migrate DEP accounts to Apple Business Manager.

    [From xms_10.9.0.10105.bin][CXM-59300]

Installing This Update

Note: If your system is configured in cluster mode, follow the steps below to update each node, one after the other.

Important: Before installing this update, take a snapshot of the current settings and create a backup of the database.

  1. Log on to your account on the Citrix website and download the XenMobile Server update (.bin) file to an appropriate location.
  2. In the XenMobile Server Console of a node click Settings > Release Management. The Release Management page appears, which displays the currently installed software version, as well as a list of any updates, patches, and upgrades you have already uploaded.
  3. Under Release Management, click Update. The Update dialog box appears.
  4. Click Browse to upload the update (.bin) file you have downloaded from support.citrix.com.
  5. Click Update and then if prompted, restart the XenMobile Server node using command line.

To verify the patch deployment

After installing this patch, log on to the XenMobile Server Console as an administrator, then navigate to Settings > Release Management > Updates. Information about the most recent successful patch installation appears in this section.


  • No Related Posts

Leave a Reply