Citrix Provisioning

What’s new

What’s new in 2607 LTSR (initial release)

This release of Citrix Provisioning includes the enhancements described in the following sections. It includes several fixes for issues seen in past releases, and issues that we have identified.

Following are the new features and enhancements:

Virtual hosting pool credentials updated correctly when entered in Configuration Wizard

Previously, the console did not always save updated virtual hosting pool credentials, which caused connection failures even when correct credentials were supplied.

With the 2607 LTSR release, credentials entered during setup are now reliably stored and used.

Configuration Wizard preserves existing service principal names instead of always removing and recreating them

The Configuration Wizard now checks service principal name (SPN) ownership before making changes. It modifies an SPN only when necessary and reports a clear error if registration fails. This behavior avoids unnecessary SPN removal and reduces the risk of Kerberos authentication disruptions when you reconfigure a provisioning server.

TLS 1.3 now used for console connections on Server 2022 and Windows 11

The PVS console now negotiates TLS 1.3, in addition to TLS 1.2, for outbound connections such as telemetry uploads and vCenter communication on Windows Server 2022 and Windows 11 hosts. This behavior ensures that the console offers the strongest available protocol, even when Citrix Cloud components might otherwise restrict connections to TLS 1.2.

Support for the New Microsoft SecureBoot CA Certificates

As documented by Microsoft at Windows Secure Boot certificate expiration and CA updates - Microsoft Support, the current certificates used for validating binaries when using Secure Boot are expiring in 2026 and have been replaced by new CA certificates which will be used in the future to validate that binaries are properly signed. This release of Citrix Provisioning includes support for secure boot when these new certificates are being used. See Windows Secure Boot certificate expiration and CA updates for details on how you can prepare for supporting secure boot once this has happened.

It is vital that you start the process of upgrading the hypervisor and existing VMs as well as upgrading to a version of Citrix Provisioning that supports the new certificates now to avoid outages starting in June 2026.

For more information, see Windows Secure Boot certificate expiration and CA updates.

<!–

Firmware counts in farm metrics telemetry

Uploaded farm metrics telemetry now includes the count of target devices by firmware type: BIOS, UEFI, or unknown. [PVS-14932]

Firmware type reporting for target devices

Target devices now detect their firmware type during boot and store the value as UEFI or BIOS in the device record for reporting. [PVS-15033]

Seeded cache for server connection information

When the database is unavailable, servers no longer hang during lengthy database reads. Citrix Provisioning now serves local server connection information from a seeded cache to improve responsiveness and resilience during database outages. [PVS-15142]

WEM Agent removed as a server prerequisite

When you install the Citrix Provisioning server, the installer no longer installs the Workspace Environment Management (WEM) Agent as a prerequisite. As a result, the installation does not automatically deploy the WEM Agent. [PVS-15144] –!>

What’s new