Tuesday, October 18, 2016

Citrix corrects clear text credentials in latest version of SecureHub

It looks like Citrix has finally corrected an issue with WorxHome/SecureHub for iOS.  Versions of WorxHome/SecureHub prior to version 10.4.0.21 included clear text username and password in the WorxHome logs.



Friday, October 14, 2016

XenMobile device grooming using the XenMobile public API and Powershell

I've been working on a Powershell module for XenMobile which you can find here.  The module mostly has get commands for now but I am actively updating...

Current functions

 new-xenmobileauthtoken  
 remove-xenmobileauthtoken  
 get-xmrestget  
 get-xmrestpost  
 get-xmapplist  
 get-xmappcontainer  
 get-xmpublicstoreappcontainer  
 get-xmcertificates  
 get-xmdevices  
 get-xmdevicesoftwareinventory  
 delete-xmdevice  
 get-xmlicenses  
 get-xmldap  
 get-xmnsgateway  
 get-xmnotificationserver  
 get-xmdeliverygroups  
 get-xmlocalusers  
 get-xmlocalgroups  
 get-xmgroups  
 get-xmserverproperties  

**Update** 10/24/2016 - I changed the XenMobile Powershell module by renaming delete-xmdevice to remove-xmdevice

For example, here's how you can delete inactive devices from XenMobile using this module.


This can be done in the XenMobile console but if you have a bunch of devices to clean up - it might be easier to do it with a script or scheduled task.





Friday, October 7, 2016

Citrix pulls Secure Hub from iOS App Store! Worx Home is missing too!

It looks like Citrix pulled Secure Hub from the iOS App Store and Worx Home is missing as well!

Obviously, there's probably a problem with Secure Hub and they had to pull it. But, uh... with Worx Home missing as well - how are iOS users supposed to enroll?

Happy Friday - Thanks Citrix!

Update - 10/7/2016 @ 2:30 PM

Citrix Secure Hub 10.4 for iOS has been removed from Apple App Store
http://support.citrix.com/article/CTX217899

Is this a joke?  Next communication on 10/10/2016!  Give me a break - this is ridiculous.

Update - 10/7/2016 - Citrix sent out the following notification.

Dear Valued Citrix XenMobile and Citrix Workspace Suite Customers,

This afternoon we released XenMobile 10.4 which included XenMobile Server, XenMobile apps and Secure Hub (formerly Worx Home). We've since received some customer reported issues that are detailed below.

Executive Summary:

Citrix Secure Hub 10.4 for iOS has been removed from Apple App Store due to some customers reporting issues when they upgrade from Secure Hub 10.3.10 to 10.4.

Please do not use MDX Toolkit 10.4 and XenMobile apps 10.4 for iOS if you have already downloaded these artifacts. MDX Toolkit 10.4 and XenMobile apps 10.4 for iOS have been removed from citrix.com

Worx apps on end-user iOS devices will continue to work even if end users could not successfully update to Secure Hub 10.4. If Worx Home update to Secure Hub 10.4 was not successful, Worx Home will continue to function on the device without any requirement for re-enrollment.

There is no issue with Secure Hub 10.4 for Android.

Next customer communication will be sent out on Monday Oct. 10, 2016

Background

Before Secure Hub 10.4, Worx Home 10.3.10 for iOS was updated to leverage the VPN Network Extension capability available in Apple’s iOS 10 which allows MDX-enabled apps to share data between each other.

The usage of VPN Network Extension in iOS 10 greatly improves the SSO (Single Sign-On) experience across all MDX apps and also reduces the number of flips back to Secure Hub. The VPN Network Extension is used by XenMobile Advanced Edition and XenMobile Enterprise Edition only on iOS 10 devices.

Secure Hub 10.4 was recently released to App Store on October, 6th, 2016.

Secure Hub 10.4 upgrade issues have been reported by some customers on iOS 10 devices who are using it with XenMobile Advanced Edition to XenMobile Enterprise Edition.

Issue

During the upgrade to Secure Hub 10.4, the following issues were observed:

Secure Hub upgrade failed on first attempt
User either got “Unable to download. Done/Retry” or the download remained in “Waiting” stage (user had to cancel the download)
Second attempt to upgrade succeeded

After upgrading to Secure Hub 10.4
User was prompted to “Allow VPN config”
After allowing, Secure Hub works as expected.

Diagnosis & Workaround

Though this problem was not observed during internal QA testing and extensive EAR testing (via TestFlight), Secure Hub 10.4 upgrade from the App Store fails during the first attempt because VPN Network Extension is still running on Worx Home 10.3.10.

This behavior is observed with upgrades from the App Store. Once the upgrade fails, iOS terminates the VPN extension in Worx Home 10.3.10 automatically. However, on the second upgrade attempt, Secure Hub 10.4 upgrade succeeds and the user has to enable the VPN Network extension by accepting the prompts.

The current workaround for users who have access to Secure Hub 10.4 is to de-activate the VPN by going to Settings -> VPN. If VPN is disabled prior to the upgrade, Secure Hub 10.4 upgrades successfully on first attempt. User will then need to enable the VPN Network extension by accepting the prompts as before. Removal of Secure Hub 10.4 for iOS from App Store Since the issue is applicable to all iOS 10 customers who are using XenMobile Advanced and Enterprise Editions, we have removed Secure Hub 10.4 from the App Store.

We have also removed MDX Toolkit 10.4 and XenMobile apps 10.4 from your customer download pages. Please do not use MDX Toolkit 10.4 and XenMobile apps 10.4 for iOS if you have already downloaded these artifacts.

Next Steps

Citrix is investigating on a fix to ensure upgrades can work smoothly even if VPN Network Extension is running. Once a fix is implemented and tested, a new version of Secure Hub 10.4 for iOS will be made available on the App Store. The next communication update will be on October 10th, 2016.

Sincerely,
The XenMobile Team