Fixed issues

Last published : Oct 14, 2026
  • The following FAS powershell commands now work correctly when FAS is configured to generate user certificates with EC (Elliptic Curve) keys:
Test-FasCrypto
Test-FasUserCertificateCrypto
  • In previous versions of FAS, a new ISignerCertificate object was created for each certificate signing request. Creation of ISignerCertificate objects was found to be a potential bottleneck in some Active Directory environments. In this release FAS re-uses the same object to avoid the bottleneck.
  • On the VDA, the following event log messages are observed:
    • Event 57, CertificateServicesClient-CertEnroll: The CitrixLogonKsp provider was not loaded because initialization failed.
    • Event 57, CertificateServicesClient-CertEnroll: The CitrixVirtualSmartcardKsp provider was not loaded because initialization failed.
The providers named in these events support FAS authentication, but the events do not indicate a problem with FAS functionality.
The latest FAS providers bundled with the VDA components won't cause these events to be generated.
Related information
Federated Authentication Service 2503