Release Notes for Citrix XenServer 6.0.2 Common Criteria Edition

This document provides important information about the Citrix XenServer 6.0.2 Common Criteria Edition.

Citrix is committed to providing secure software to our customers. XenServer 6.0.2 has gained EAL2 Common Criteria certification. Refer to https://www.citrix.com/support/security-compliance/common-criteria.html for more details.

Documentation may be updated or changed after the initial release. Citrix suggests regularly visiting the XenServer 6.0.2 Common Criteria page on Citrix Support to learn about any available updates.

Licensing

You can purchase a XenServer License from https://citrix.com/buy. For more information about XenServer Licensing, refer to the XenServer Licensing FAQ. For detailed information about obtaining license files and installing a Citrix License Server, see the Licensing Your Product section on Citrix eDocs. Any non-technical issues with XenServer including, Subscription Advantage program support, licensing, administrative support, and order confirmation, can be raised through Citrix Customer Service.

Notes

  • Citrix XenServer 6.0.2 Common Criteria Edition must be connected through the Management Network to a physical computer running the Citrix License Server software with a Citrix XenServer Platinum Edition license.
  • The Linux-based Citrix License Server virtual appliance is not supported for use with the Common Criteria configuration.
  • The Platinum edition of XenServer 6.0.2 requires a XenServer 6.0.2 license for each host in the pool and the Windows-based Citrix License Server software (version 11.6.1 or later) to enable you to install your XenServer licenses.

Functional Differences between XenServer 6.0.2 and XenServer 6.0.2 Common Criteria Edition

Please refer to Appendix C, Common Criteria Administrator’s Guide for Citrix XenServer 6.0.2, Platinum Edition.

Note:

XenServer 6.0.2 Common Criteria Edition is only certified for specific hardware configurations. Refer to the Common Criteria Evaluated Configuration Guide for Citrix XenServer 6.0.2, Platinum Edition.

Additional Fixes

XenServer 6.0.2 Common Criteria Edition incorporates the following hotfixes released for XenServer 6.0.2:

System Requirements

For minimum host requirements for running XenServer, refer to the XenServer Technical Specifications and to the Common Criteria Evaluated Configuration Guide for XenServer 6.0.2 Platinum Edition. The hardware selected for use must be certified and supported for use with XenServer. Refer to the XenServer Hardware Compatibility List (HCL) at https://citrix.com/xenserver/cc-hcl for details. For Common Criteria purposes, the XenServer 6.0.2 HCL applies with the additional restrictions that:

  1. Each server must contain at least 2 CPU cores.
  2. Only Intel 64-bit-capable CPUs with both VT-x and EPT capabilities are supported.
  3. Each server must contain at least 3 NICs.

XenCenter

The evaluated configuration as described in the Common Criteria Security Target for Citrix XenServer 6.0.2, Platinum Edition includes the XenCenter client as a management console, although it is not included in the Target of Evaluation and is not relied upon to implement any security functions.

When XenCenter is used as the client, the Common Criteria specific version must be used. This version of XenCenter is available from https://www.citrix.com/downloads/xenserver/product-software/xenserver-602-common-criteria-version.html.

Note

The standard XenServer 6.0.2 version of XenCenter is not compatible or supported for use with XenServer 6.0.2 Common Criteria.

Installation and Upgrades

Upgrade to XenServer 6.0.2 Common Criteria from XenServer 5.6 Common Criteria is possible via the following steps:

  1. Export all existing VMs as *.xva files. Before the VMs can be exported as *.xva files, they must either be shut down or suspended.

    The export process may take some time, depending on the size of the VM’s virtual disks and the available network bandwidth.</li>

  2. Zeroise the hard disk of the XenServer host/s. Citrix recommends that customers use a suitable tool to zeroise the hard disk of the XenServer host/s to be upgraded.
  3. Install XenServer 6.0.2 Common Criteria on the host/hosts as a fresh installation.
  4. When XenServer 6.0.2 CC has been installed on the hosts, customers should configure as required (including creation of any pools).
  5. Import the VMs.

    The import process may take some time, depending on the size of the imported VM’s virtual disks and the available network bandwidth.

Upgrade to XenServer 6.0.2 Common Criteria from other versions of XenServer is not supported.

Before You Upgrade

  • If required as a management console, the version of XenCenter compatible for use with XenServer 6.0.2 Common Criteria is available from https://www.citrix.com/downloads/xenserver/product-software/xenserver-602-common-criteria-version.html.
  • Citrix strongly recommends that you take a backup of the state of your existing pool using the xe command pool&ndash;dump&ndash;database (refer to the Common Criteria Administrator’s Guide for Citrix XenServer 6.0.2, Platinum Edition for more details).
  • Before upgrading XenServer hosts, customers should ensure that they are not affected by any of the listed issues listed in the installtion errata.

To set up the XenServer installation media on a HTTP, FTP, or NFS server

  1. On the server, create a new directory from which the XenServer installation media can be exported via HTTP, FTP or NFS.
  2. Copy the entire contents of the XenServer installation media to the newly created directory on the HTTP, FTP or NFS server. This is your installation repository.

Fresh Installation of XenServer 6.0.2

To perform a fresh installation of XenServer 6.0.2 refer to the instructions in the Common Criteria Evaluated Configuration Guide for XenServer 6.0.2 Platinum Edition.

Known Issues and Errata

This section details known issues with this release and any workarounds that can be applied.

Installation and Upgrade

  • A XenServer installation can abort at the ‘Preparing for installation’ stage and display an error message: ‘An unrecoverable error has occurred…’ Ensure that the host has network access and any necessary permissions required to fetch the XenServer installation files. [CA-74103]

General

  • A Windows VM may fail to boot properly if streaming over Citrix Provisioning Services (PVS). This is an intermittent fault, and rebooting the VM should resolve the issue. [CA-60261]
  • XenServer reports the amount of space used by a virtual disk, but this number can be substantially out of date. [CA-51466]
  • The xe pool&ndash;certificate&ndash;install command requires a filename in the current working directory. It will not accept a file path [CA-77465].
  • Under certain circumstances, the network interface of a VM may work intermittently. [CA-91112]

Internationalization

  • Non-ASCII characters, such as characters with accents, cannot be used in the host console. [CA-40845]
  • The root password of the host installer must not contain non-ASCII characters. [CA-47461] </ul>

Hardware Compatibility

Note:

Customers should refer to the XenServer Hardware Compatibility List (HCL) for the most recent additions and advice for all hardware compatibility questions.

  • Intel Errata for Nehalem and Westmere CPU implementations of C-states may lead to system instability, apparently random freezes or reboots — including during installation. Customers with Nehalem and Westmere CPUs are advised to disable C-states in the system BIOS as detailed in CTX127395. [CA-60628]

Storage

  • If an ISO SR is on an NFS server and the connection to the server is temporarily lost, you may need to restart your XenServer host to regain connection. [CA-10471]

XenCenter

  • XenCenter help, states the following: ...Users should monitor the Citrix Support site, https:// support.citrix.com/[**URL to be confirmed**], for updates that are applicable specifically to the XenServer CC version. The text [**URL to be confirmed**] is erroneous and can be ignored. [CA-87283]
  • Modifying the font size or DPI on the computer on which XenCenter is running can result in the user interface displaying incorrectly. The default font size is 96 DPI; Windows Vista refers to this as “Default Scale” and Windows 7 as “100%”. [CA-45514]
  • Importing an .ova or .ova.gz file from a directory for which the user has read-only access will fail. Write permission is required to uncompress the .ova.gz file and extract the .ovf package files from the .ova file. [CA-61238]

Guests

  • When running greater than 50 VMs per XenServer host, the steps in CTX126531 should be followed to reconfigure Dom0 memory settings. [CA-48485]

Documentation and Support

Finding Documentation

For the most up-to-date product documentation for every Citrix product, visit the Citrix Knowledge Center. Additional information is also available from Citrix eDocs.

For licensing documentation, go to the Licensing Your Product section on Citrix eDocs.

Getting Support

Citrix provides technical support primarily through Citrix Solutions Advisers. Contact your supplier for first-line support, or go to Citrix Online Technical Support to find the nearest Citrix Solutions Advisor.

Citrix offers online technical support services on the Citrix Support Web Site. This site includes links to downloads, the Citrix Knowledge Center, Citrix Consulting Services, and other useful resources.

Other Resources