-
-
Cloud Connector Standalone Citrix Secure Ticketing Authority (STA) service
-
-
-
-
This content has been machine translated dynamically.
Dieser Inhalt ist eine maschinelle Übersetzung, die dynamisch erstellt wurde. (Haftungsausschluss)
Cet article a été traduit automatiquement de manière dynamique. (Clause de non responsabilité)
Este artículo lo ha traducido una máquina de forma dinámica. (Aviso legal)
此内容已经过机器动态翻译。 放弃
このコンテンツは動的に機械翻訳されています。免責事項
이 콘텐츠는 동적으로 기계 번역되었습니다. 책임 부인
Este texto foi traduzido automaticamente. (Aviso legal)
Questo contenuto è stato tradotto dinamicamente con traduzione automatica.(Esclusione di responsabilità))
This article has been machine translated.
Dieser Artikel wurde maschinell übersetzt. (Haftungsausschluss)
Ce article a été traduit automatiquement. (Clause de non responsabilité)
Este artículo ha sido traducido automáticamente. (Aviso legal)
この記事は機械翻訳されています.免責事項
이 기사는 기계 번역되었습니다.책임 부인
Este artigo foi traduzido automaticamente.(Aviso legal)
这篇文章已经过机器翻译.放弃
Questo articolo è stato tradotto automaticamente.(Esclusione di responsabilità))
Translation failed!
FIDO2 diagnostics tool
CtxFido2Diagnostics.exe is a command-line tool on the VDA that helps Citrix administrators and support engineers diagnose and resolve FIDO2 redirection configuration issues in HDX sessions. The tool collects and displays key configuration data in JSON format, enabling rapid identification of policy misconfigurations, missing application hookings, and version mismatches.
The tool is located at: C:\Program Files\Citrix\HDX\bin\CtxFido2Diagnostics.exe
The tool’s path is included in the system environment variables during VDA installation, so you can run it from any directory by typing CtxFido2Diagnostics.exe.
Requirements
Session host
- Operating system: Windows 10 1809 or later, Windows 11 21H2 or later, Windows Server 2019 or later
Client device
- Operating system: Windows 10 1809 or later
Information displayed
When you run CtxFido2Diagnostics.exe from within an HDX session, the tool outputs a JSON object containing the following diagnostic information:
CVAD Version
Displays the version of Citrix Virtual Apps and Desktops installed on the session host. Use this to verify that the VDA version supports FIDO2 redirection and the specific WebAuthn features required by your deployment.
Example:
"CVAD Version": "2607.0.100.407"
<!--NeedCopy-->
CWA Version
Displays the version of Citrix Workspace app installed on the client device. Both the VDA and Citrix Workspace app must meet minimum version requirements for FIDO2 redirection to function correctly.
Example:
"CWA Version": "CWA for Windows, 26.3.10.69"
<!--NeedCopy-->
Fido2PolicyEnabled
Indicates whether the FIDO2 redirection policy is enabled (true) or disabled (false) for the current session. When this value is false, FIDO2 redirection does not function regardless of other configuration settings.
Administrators configure this policy through Citrix Studio or Citrix Group Policy under ICA > FIDO2.
Example:
"Fido2PolicyEnabled": true
<!--NeedCopy-->
Session ID
Displays the ID of the current HDX session. This value is useful for correlating the diagnostic output with session logs in Director or event viewer entries during troubleshooting.
Example:
"Session ID": 2
<!--NeedCopy-->
WebAuthn API Version
Displays the WebAuthn API version supported by the current CVAD and CWA combination. The API version determines which FIDO2/WebAuthn capabilities are available for redirection.
Example:
"WebAuthn API Version": 7
<!--NeedCopy-->
FIDO2 Allowed Processes Registry setting
Lists the application process paths configured through the registry on the session host that are permitted to use FIDO2 redirection. These paths correspond to the registry value at:
HKLM\SOFTWARE\Citrix\CtxHook\AppInit_DLLs\CtxWebAuthnHook\
This list typically includes supported browsers (Chrome, Edge, Firefox, Brave), the Azure AD Broker Plugin, and the Citrix ICA client itself. The FIDO2 diagnostics tool executable is also included so it can perform diagnostic calls.
FIDO2 Allowed Processes Studio Policy setting
Lists additional application process paths configured by administrators through Citrix Studio policy setting that are allowed to use FIDO2 redirection. These entries supplement the registry-based list and allow administrators to add custom applications (such as third-party authenticator utilities) without modifying the registry directly.
FIDO2 Redirection Hookable Applications
Lists the application executable names that the FIDO2 hooking module has successfully identified and can intercept for WebAuthn API redirection. Only applications appearing in this list will have their FIDO2 authentication requests redirected to the client device.
If an application appears in the allowed processes list but does not appear here, the hooking module was unable to attach to it. This can indicate a compatibility issue, an application that is not currently running, or a configuration problem.
Related information
For detailed guidance on resolving FIDO2 redirection issues identified by this tool, see Troubleshoot FIDO2 redirection.
Share
Share
In this article
This Preview product documentation is Citrix Confidential.
You agree to hold this documentation confidential pursuant to the terms of your Citrix Beta/Tech Preview Agreement.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation.
The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product purchase decisions.
If you do not agree, select I DO NOT AGREE to exit.