Citrix App Layering | Adding version to OS Layer failing with error “Failed to duplicate layer. Please ensure that Windows was shut down properly.”

Adding version to OS Layer failing with error “Failed to duplicate layer. Please ensure that Windows was shut down properly”.

Screenshot of the error:

User-added image

On the ELM logs, we would see the below errors:

2021-07-14 09:20:34,824 INFO DefaultPool2 CopyPartitionByNtfsCloneJobStep: Cloning NTFS from block device /dev/nbd946p1 to /dev/nbd947p1

2021-07-14 09:20:34,875 ERROR DefaultPool2 CopyPartitionByNtfsCloneJobStep: NtfsClone failure (exitCode 1), repository reports 2760335364096 bytes remaining out of 3297175932928 bytes total

2021-07-14 09:20:34,880 ERROR DefaultPool2 CopyPartitionByNtfsCloneJobStep: NtfsClone failure: ERROR: Volume ‘/dev/nbd946p1’ is scheduled for a check or it was shutdown uncleanly. Please boot Windows or use the –force option to progress.

2021-07-14 09:20:34,880 ERROR DefaultPool2 JobStepEnumerator: Job step failed: MessageId=FailedNtfsClone, DefaultTitle=, CategoryData={[ExternalToolFailure { Call = “/usr/sbin/ntfsclone”, Args = “-O /dev/nbd947p1 /dev/nbd946p1”, Output = “”, Error = “ntfsclone v2018.3.1AR.1 (libntfs-3g)”, ErrorCode = 1 }]}

2021-07-14 09:20:34,880 INFO DefaultPool2 JobInterceptor: FinalizeLayerJob for JobId ‘768d6e’ has failed


  • No Related Posts

Cannot ‘Allow’ Citrix system file extensions when installing CF for Mac

Grab a copy of the database

  • The path is: /var/db/SystemPolicyConfiguration/ . See screenshot below and the required files:
  • image.png
  • Check if the kernel extension is allowed as shown below:
  • If it is allowed, then perform the steps highlighted below.

To fix the “Drive Unavailable” error, perform the following steps:

  1. Startup the Mac in recovery mode .
  2. Click the Utilities menu and select Terminal.
  3. Enter the following command:
    • /usr/sbin/spctl kext-consent add TEAMID
  4. Press Enter
    • Example: For Citrix the command would be: /usr/sbin/spctl kext-consent add S272Y5R93J
  5. Close the Terminal app and restart

If issue persists, Trigger the prompt by loading the kernel extension manually

sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.12/ctxfuse.kext/

Note: Older builds (20.9 or less) can use sudo kextutil -t /Library/Filesystems/ctxfuse.fs/Contents/Extensions/10.11/ctxfuse.kext/

After running this command, open the system preferences in the security pane and see if you can approve the prompt.

While running the above command, if you encounter the Unable to stage kext” error then perform the action items highlighted below:


  1. As suggested here, run the below command:
    • chflags restricted /Volumes/Macintosh HD/private/var/db/KernelExtensionManagement
  2. People who have ran into the staging error have also reported upgrading to MacOS 10.15 Catalina also fixes the issue.


  • No Related Posts

Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021

On March 25, 2021, the OpenSSL Project released a security advisory, OpenSSL Security Advisory [25 March 2021], that disclosed two vulnerabilities.

Exploitation of these vulnerabilities could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user or device, or to cause a denial of service (DoS) condition.

This advisory will be updated as additional information becomes available.

This advisory is available at the following link:

Security Impact Rating: High

CVE: CVE-2021-3449,CVE-2021-3450


  • No Related Posts