• Like
  • Save
Configuring and trouble shooting xendesktop sites
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

Configuring and trouble shooting xendesktop sites

  • 225 views
Published

Configuring and trouble shooting xendesktop sites

Configuring and trouble shooting xendesktop sites

Published in Technology
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Be the first to comment
No Downloads

Views

Total Views
225
On SlideShare
0
From Embeds
0
Number of Embeds
2

Actions

Shares
Downloads
0
Comments
0
Likes
1

Embeds 0

No embeds

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
    No notes for slide

Transcript

  • 1. Ramon Scott – Lead Escalation Engineer Configuring & Troubleshooting XenDesktop Sites August 29, 2013 Citrix Support Secrets Webinar Series
  • 2. © 2012 Citrix | Confidential – Do Not Distribute Presenter Bio: Ramon Scott 2 Over 17 Years of Experience in IT Joined Citrix in April 2010 Started directly into the Escalation Team – primary focus on XenApp Assigned as the Dedicated Engineer for a Major Strategic Account from Q4-2010 Moved to XenDesktop team in July 2011 Additional details • Bachelor’s Degree in Information Technology with a specialization in Network Administration • Certifications: CCA, CCNA, CCDA, MCSE and MCITP-EA
  • 3. © 2012 Citrix | Confidential – Do Not Distribute Presentation Goals 3  Provide an Understanding of the Architecture  Instruct on How to Configure  Provide Proven Troubleshooting Methodologies and Resources
  • 4. High-Level XenDesktop Database And Services Architecture
  • 5. © 2012 Citrix | Confidential – Do Not Distribute Database
  • 6. © 2012 Citrix | Confidential – Do Not Distribute • Supported Databases: • SQL Server 2008 SP1 / 2008R2 (including Express) • Database Schema • Full Relational Schema • Tables, Views, Stored Procedures • Single Database (for core product) • Multiple SQL ‘Schemas’ in Database • ‘Schemas’ map onto Windows services running on Broker XenDesktop 5 Database Overview Broker Broker Database
  • 7. © 2012 Citrix | Confidential – Do Not Distribute Setup Process XD Console Single Admin Broker1. Schema Database XD Admin 3.Verify XD Admin credentials used Separate Admins XD Console Broker1. Schema Database3. Schema XD Admin 4.Verify SQL Server Console SQL Admin 2.Schema “Export” (SQL script) SQL Admin credentials used
  • 8. © 2012 Citrix | Confidential – Do Not Distribute Database Access • Security Access Model ᵒ Network Service Account “NT AUTHORITYNETWORK SERVICE” ᵒ Computer Account “DOMAINMACHINE$” • SQL Login per Broker • Restricted permission set ᵒ Brokers do not have rights to change schema Controller DatabaseController Broker Service Controller DatabaseController Broker Service Database
  • 9. © 2012 Citrix | Confidential – Do Not Distribute • Broker is critically dependant on Database • Existing connections not impacted • Creating new connections and reconnecting to desktops impacted • Database Failure = Broker Failure • Supported Database H/A Options: (expected popularity order) 1. SQL Mirror 2. Virtual Machine H/A 3. SQL Cluster Database High-Availability Citrix Confidential - Do Not Distribute
  • 10. © 2012 Citrix | Confidential – Do Not Distribute Database Schema Roles and Permissions XenDesktop Service Database Role AD Identity Service (Acct) ADIdentitySchema_ROLE Broker Service (Broker) chr_Broker chr_Controller Central Configuration Service (Config) ConfigurationSchema_ROLE Machine Creation Service (PvsVM) DesktopUpdateManagerSchema_ROLE Hosting Management Service (Hyp) HostingUnitServiceSchema_ROLE Machine Identity Service (Prov) MachinePersonalitySchema_ROLE
  • 11. © 2012 Citrix | Confidential – Do Not Distribute Health Checks: XDDBDiag • Provided consistency data check on the data • Provides connectivity verification It also provides the following: ᵒ Virtual Desktop Agent Information ᵒ Hypervisor Connections Information ᵒ Policy Information ᵒ Controller Information ᵒ Desktop Groups Information ᵒ SQL Information ᵒ Current Connections / Connection Log
  • 12. © 2012 Citrix | Confidential – Do Not Distribute Services
  • 13. © 2012 Citrix | Confidential – Do Not Distribute Machine Creation Services Broker Service Infrastructure Services XenDesktop 5 Services Architecture 13 Controller Broker Service Machine Creation Service AD Identity Service Machine Identity Service Host Service Configuration Service Virtual Desktop Agent (VDA) WinRM 2.0 [5985/5986] Desktop Studio WCF [80] PowerShell Desktop Director WCF [80] PowerShell SQL Server Windows Communication Foundation (WCF)
  • 14. © 2012 Citrix | Confidential – Do Not Distribute Service Status XenDesktop Service PowerShell Cmdlet AD Identity Service (Acct) Get-AcctServiceStatus Broker Service (Broker) Get-BrokerServiceStatus Central Configuration Service (Config) Get-ConfigServiceStatus Machine Creation Service (Prov) Use Get-ProvServiceStatus Hosting Management Service(Hyp) Get-HypServiceStatus Machine Identity Service (PvsVM) Get-PvsvmServiceStatus
  • 15. © 2012 Citrix | Confidential – Do Not Distribute Machine Creation
  • 16. © 2012 Citrix | Confidential – Do Not Distribute Desktop Catalog models • Existing • Dedicated • Pooled • Pooled with personal vDisk • Streamed • Streamed with personal vDisk Base Image App Profile App Profile App Profile PvD PvD PvD Image Image Image Profile Profile Profile Profile Profile Profile Base Image with Apps Base Image with Apps Streamed Base Image with Apps Streamed Base Image App Profile App Profile App Profile PvD PvD PvD *Image Streamed from Citrix Provisioning Server (PVS) *Image created with Machine Creation Services (MCS) *Image created outside of XenDesktop
  • 17. © 2012 Citrix | Confidential – Do Not Distribute Desktop Catalog models PVS Streamed Virtual Physical Streamed with PvD Virtual Only MCS Pooled Random Static Pooled with PvD* Dedicated PreAssigned First Use * Behaves like pooled-static
  • 18. © 2012 Citrix | Confidential – Do Not Distribute MCS – ID Disk, Difference Disk, Base VM Virtual Desktop 1Diff Disk ID Disk VHD Chain Windows 7 Master This is what the user sees as Drive C: This is hidden from the users view Virtual Desktop 2Diff Disk ID Disk VHD Chain Virtual Desktop xDiff Disk ID Disk VHD Chain Storage Subsystem
  • 19. © 2012 Citrix | Confidential – Do Not Distribute MCS with PvD – ID Disk, Diff Disk, Base VM, PVDisk Virtual Desktop 1 VHD Chain Windows 7 Master Diff Disk ID Disk Personal vDisk• This part is hidden from user • Merged with the Diff Disk • Seen by user as Drive C: • E.g. Installed apps • Seen by the user as Drive P: • USERDATA e.g. My Documents • Free space is the split allocation • PVDisk auto-created during catalog creation by copying PvD template from Base VM • 10GB by default with 50 / 50 split for App Data / User Data
  • 20. © 2012 Citrix | Confidential – Do Not Distribute PVS – Streamed vDisk, Cache, Base VM Virtual Desktop 1Streamed vDisk Write Cache PVS Stream Windows 7 Master This is what the user sees as Drive C: Visible file on another disk, typically D: Virtual Desktop 2Streamed vDisk Write Cache PVS Stream Virtual Desktop xStreamed vDisk Write Cache PVS Stream Storage Subsystem
  • 21. © 2012 Citrix | Confidential – Do Not Distribute PVS with PvD–Streamed vDisk, Cache, Base VM, PvDisk Virtual Desktop 1 PVS Stream Windows 7 Master Streamed vDisk Write Cache Personal vDisk• This part is hidden from user • Seen by user as Drive C: • E.g. Installed apps • Seen by the user as Drive P: • USERDATA e.g. My Documents • Free space is the split allocation • PvDisk auto-created during catalog creation by copying PvD template from Base VM • 10GB by default with 50 / 50 split for App Data / User Data
  • 22. © 2012 Citrix | Confidential – Do Not Distribute Where are some of the common Issue ? • Hypervisor communication • Domain permissions • Previously failed attempts still present in database • Host Connection configured with incorrect storage • Naming convention on the host
  • 23. © 2012 Citrix | Confidential – Do Not Distribute What logs do we need for this issue ? Machine Creation Services Broker Service Infrastructure Services Broker Broker Service Machine Creation Service AD Identity Service Machine Identity Service Host Service Configuration Service Desktop Studio WCF [80] PoSH SQL Server
  • 24. © 2012 Citrix | Confidential – Do Not Distribute Troubleshooting Methodology 24 • Understand issue history • Verify configuration, error logs and alerts • Gather and review log data of issues • Compare data to working environment
  • 25. © 2012 Citrix | Confidential – Do Not Distribute Enabling Log from the Command Line Service –LogFile <Location>Citrix.ADIdentity.SdkWcfEndpoint.exe -LogFile c:xdlogsAD.log Citrix.MachineCreation.SdkWcfEndpoint.exe -Logfile “c:xdlogsMCS-PVSvm.log” Citrix.MachineIdentity.SdkWcfEndpoint.exe -LogFile c:xdlogsmi.log
  • 26. Case Study 1 Machine Creation Services
  • 27. © 2012 Citrix | Confidential – Do Not Distribute Case Study Walk Through Background: • New Deployment • Latest Hotfixes • Full Administrator account used • Worked before they rebuilt environment Case Study 1: MCS Fails after wizard
  • 28. © 2012 Citrix | Confidential – Do Not Distribute Log Analysis: Desktop Studio Logs Case Study 1: Machine Creation Service fail after wizard 24/04/13 02:37:10.7603 : DesktopStudio: [6] Script SetActionMetaData(402): [RES] Value:Failed to copy all master images to all of the Hosts. No machines have been added to the Catalog. Search Terms: [Time of Issue] Fail | Error | Exception | Denied
  • 29. © 2012 Citrix | Confidential – Do Not Distribute Search Terms: [Time of Issue] Fail | Error | Exception | Denied Case Study 1: Machine Creation Service fail after wizard Log Analysis: Machine Creation Service Logs Failed to copy disk. Reason : SR_HAS_NO_PBDS ManagedMachineException: Failed to copy disk. Reason : SR_HAS_NO_PBDS Concluding job d5ea54c6-b7f1-4d45-ac08-2e2abae39e48 with state DiskConsolidationFailed. WorkflowAddMetadata(, Citrix_DesktopStudio_ExtraWarnings, Failed to copy all master images to all of the Hosts. No machines have been added to the Catalog.)
  • 30. © 2012 Citrix | Confidential – Do Not Distribute Root Cause analysis: Misconfiguration 30 • Failed to copy disk Reason : SR_HAS_NO_PBDS • Hypervisor Connection’s did not include correct storage for the Master Image • Target device disk could not be copied due to this Hypervisor - Storage misconfiguration *Definitions: SR - Storage Repositories PBD - Physical Block Devices
  • 31. VDA Startup and Registration
  • 32. © 2012 Citrix | Confidential – Do Not Distribute Controller DDC Broker Service VDA Registration VDA Desktop Service VDA Active Directory Controller WCF LDAP Database Registered
  • 33. © 2012 Citrix | Confidential – Do Not Distribute Troubleshooting VDA Startup and Registration • XDPing Log • Basic Checks • Logs: ᵒ Workstation Agent Logs ᵒ Broker Logs • Network Trace Controller Broker Service VDA Desktop Service 1011011010 SSL 1011011010 SSL 101101
  • 34. © 2012 Citrix | Confidential – Do Not Distribute XDPING • Can be run on both the DDC and VDA • Used to collect data related to basic components • Will verify if the components are working correctly ᵒ Verify Domain Membership ᵒ Network Interfaces ᵒ WCF Endpoints ᵒ Services ᵒ DNS lookup ᵒ Time difference between machine and Domain Controller
  • 35. © 2012 Citrix | Confidential – Do Not Distribute Basic Checks • Check the Network: Ping , Telnet and NetStat, Firewall • Ensure Services started without errors • Listening on the correct port • Check time • Check configured list of DDCs in registry
  • 36. Case Study 2 Startup and Registration
  • 37. © 2012 Citrix | Confidential – Do Not Distribute Case Study Walk Through Background: • Locked down environment • Special configuration needed to manually enable needed services • Worked in the Proof of Conference Lab but failed in production Case Study 2: New Catalog Fail to Register
  • 38. © 2012 Citrix | Confidential – Do Not Distribute Log Analysis: Workstation Agent Service Logs Failed to register with http://FTLRSCOTT2RHONE.lab.net:80/Citrix/CdsController/IRegistrar. WCF Fault with detail CallbackCommunicationError, message 'Fail worker callback using SPN host/RS2-SynPool01.lab.net and IP address 10.19.196.945' Register FAILURE: HighAvailabilityActive = False, InHighAvailabilityMode = False, _firstRegistrationAttemptTime = 05/18/2013 13:54:31, HighAvailabilityRegistrationTimout = 00:05:00 Message following Error pattern Could not register with any controllers. Waiting to try again in 9407 ms 38 Search Terms: [Time of Issue] Fail | Error | Exception | Denied Case Study 2: New Catalog Fail to Register
  • 39. © 2012 Citrix | Confidential – Do Not Distribute Log Analysis: Broker Service Logs Broker:TestWorkerComms failed for worker S-1-5-21-1123877020-465626563- 3648135752-1267 caught exception: System.ServiceModel.Security.SecurityNegotiationException: The caller was not authenticated by the service. ---> System.ServiceModel.FaultException: The request for security token could not be satisfied because authentication failed. 39 Search Terms: [Time of Issue] Fail | Error | Exception | Denied Case Study 2: New Catalog Fail to Register
  • 40. © 2012 Citrix | Confidential – Do Not Distribute Root Cause analysis: Misconfiguration 40 • The DDC was not authorized the initiate a connection to the VDA • “Access To Computer From The Network” Computer Policy did not have an entry for the Controlled and the default everyone was removed in production. Resolution: Customer added explicit entry to a Group that included all the Brokers as members
  • 41. © 2012 Citrix | Confidential – Do Not Distribute • PVD maintains logs in the base of the volume attached to the VM ◦ (alongside the VHD containing the PVD user-installed applications) • These logs contain a wealth of information that should be captured and provided to support/engineering if you experience problems • Most frequently seen PVD support cases … ◦ Failure of PVD to start virtualization (PVD can’t locate volume/VHD, etc.. …) ◦ Customers trying to install unsupported apps ◦ Customers trying to move PVDs between VMs
  • 42. © 2012 Citrix | Confidential – Do Not Distribute 42 • Desktop Director has helpdesk-facing PVD metrics and support ◦ % of application area in use / total size ◦ % of user profile area in use / total size ◦ PVD reset • PVD reset allows the helpdesk to reset the application area while leaving the user’s data intact ◦ Aka “revert to factory default” ◦ Useful to reset PVDs that become wedged due to users installing broken applications
  • 43. VDA Launch
  • 44. © 2012 Citrix | Confidential – Do Not Distribute VDA Launch Controller #1 Broker Service DDC VDA Desktop Service VDA WI Idle Launch Request SQL WCF XML broker queries DB for a ready worker Broker signals worker to Prepare for a Session User Clicks to launch session ICA Service Preparing New Session
  • 45. © 2012 Citrix | Confidential – Do Not Distribute VDA Launch Controller #1 Broker Service DDC VDA Desktop Service VDA WI SQL WCF Work State: Active Work State: Connected Request to Validate Ticket sent Controller ICA file is sent to Endpoint ICA Service 1. Validates Ticket 2. Validates License 3. Policies Ticket is ValidAuthNTicket Connected Portica gets License Active
  • 46. © 2012 Citrix | Confidential – Do Not Distribute
  • 47. © 2012 Citrix | Confidential – Do Not Distribute Troubleshooting VDA Launch • Event Logs (Web Interface, Controller, Storefront) • Desktop Studio • Broker Logs • Workstation Agent • Portica Logs • Network Packet tracing
  • 48. Case Study 3 VDA Launch
  • 49. © 2012 Citrix | Confidential – Do Not Distribute Case Study Walk Through Background: • They recently converted all images to a Citrix PVS image • The original image worked • All streamed images including the golden image failed to launch Case Study 3: Launch Failure 1030
  • 50. © 2012 Citrix | Confidential – Do Not Distribute Search: Prepare
  • 51. © 2012 Citrix | Confidential – Do Not Distribute Troubleshooting :VDA Launch • Search Strings: Checkpoint|connectionaccept|WaitforincomingConnection|sessionicaconnect
  • 52. © 2012 Citrix | Confidential – Do Not Distribute Troubleshooting :VDA Launch • Search Strings: Checkpoint|connectionaccept|WaitforincomingConnection|sessionicaconnect
  • 53. © 2012 Citrix | Confidential – Do Not Distribute Root Cause analysis: MFAphook Module Failed to Load 53 • Conversion via provisioning server had changes the long name format of the drive • mfaphook failed to load and this is needed for interaction with the OS. Resolution: Add back short name to system see CTX133773 for more information
  • 54. Tools
  • 55. © 2012 Citrix | Confidential – Do Not Distribute XD Tools • HDX Monitor • CDF Control • Citrix Scout • Site Checker • Desktop Director
  • 56. © 2012 Citrix | Confidential – Do Not Distribute HDX Monitor • Thinwire (Graphics) • Direct 3D (Graphics) • Media Stream (aka RAVE) • Flash • Audio • USB Devices
  • 57. © 2012 Citrix | Confidential – Do Not Distribute HDX Monitor • Mapped Client Drives (CDM) • Branch Repeater • Printer • Client • Smart Card • Scanner • System
  • 58. © 2012 Citrix | Confidential – Do Not Distribute Citrix Scout / XD Collector (CTX130147) 58 • Push button easy data collection system • Makes data collection and upload push button easy • Integrates data collected by Scout with the Citrix Tools as a Service (TaaS) backend • Simplifies data collection & analysis
  • 59. © 2012 Citrix | Confidential – Do Not Distribute #CitrixSummit CDF Control: CTX111961 Tip: • Use this tool to remotely enable and collect CDF traces when system are non persistent 59
  • 60. © 2012 Citrix | Confidential – Do Not Distribute Site Checker Tool: CTX133767 • Enumerate Environment • Checks Services Status • Checks service instances registration status • Reset Controllers Services instances into Database
  • 61. © 2012 Citrix | Confidential – Do Not Distribute Desktop Director 61 • Web Based • Unified view of apps and desktops • End-user details empower the help desk • Includes HDX Monitor • Access to personal vDisk tasks
  • 62. Resources discussed
  • 63. © 2012 Citrix | Confidential – Do Not Distribute Optimal deployment recommendations • CTX124087 - XenDesktop Modular Reference Architecture • CTX127939 - XenDesktop 5 Database Sizing and Mirroring Best Practices • CTX123244 - High Availability for Desktop Virtualization - Reference Architecture • CTX120760 - XenDesktop - Design Handbook • CTX128700 - XenDesktop Planning Guide - XenDesktop Scalability • Whitepaper - Benchmarking Citrix XenDesktop using Login Consultants VSI 63
  • 64. © 2012 Citrix | Confidential – Do Not Distribute For More Information • CTX132536 - Worker Unregisters at Session Launch • CTX130147 - Citrix Scout • CTX111961 - CDFControl • CTX127492 - How to enable Controller Service Logging in XenDesktop 5 • CTX128075 - XDDBDiag: XenDesktop 5 Database Diagnostics • CTX128909 - XenDesktop 5 Logon Process and Communication Flow 64
  • 65. © 2012 Citrix | Confidential – Do Not Distribute For More Information • Vmware – Using VMware with XenDesktop • SCVMM Using Microsoft SCVMM 2008 with XenDesktop • CTX127538: How to Reconfigure a XenDesktop Site to Use a Mirrored Database • CTX127998 : Database Access and Permission Model for XenDesktop 5 CTX133160 - LSQuery - License Server Data Collection Tool CTX127314 - How to Collect Data for Troubleshooting Licensing Issues 65
  • 66. Takeaways
  • 67. © 2012 Citrix | Confidential – Do Not Distribute Presentation Goals Recap 67  Provide an understanding of the architecture  Instruct On How To Configure  Provide Troubleshooting Resources
  • 68. © 2012 Citrix | Confidential – Do Not Distribute About Citrix Services Citrix Services make sure you succeed with your virtualization programs. How we can help Citrix Education – The fastest, most efficient way to get your team the virtualization skills they need. Online, on-site or in class. citrix.com/training Citrix Consulting – Intensive engagements for complex, critical or just plain massive projects. citrix.com/consulting Citrix Support – Always-on support services that leverage everything we know about best-practice deployment and maintenance. citrix.com/support Educate | Guide | Support | Succeed
  • 69. © 2012 Citrix | Confidential – Do Not Distribute • 40 insider troubleshooting tips • Covering XenDesktop, XenServer, XenApp and NetScaler • Citrix Support top engineers • FREE eBook • Citrix Auto Support • Now available! Secrets of the Citrix Support Ninjas
  • 70. © 2012 Citrix | Confidential – Do Not Distribute Premier Support Calculator Check it out
  • 71. © 2012 Citrix | Confidential – Do Not Distribute Next Webinar: September • Title: Troubleshooting a XenDesktop environment using the PowerShell SDK • Description: The Citrix XenDesktop PowerShell SDK is the foundation for all interactions with a XenDesktop database and is the same SDK used by Desktop Studio. • This deep dive session will include a behind-the-scenes look at several tools used by Citrix Technical Support that utilize the PowerShell SDK, including common configuration cmdlets and scripts. • When: Sept 26th Registration Now!
  • 72. Work better. Live better.Work better. Live better.