Citrix Provisioning

What’s new

What’s new in 2607 LTSR (initial release)

This release of Citrix Provisioning includes the enhancements described in the following sections. It includes several fixes for issues seen in past releases, and issues that we have identified.

Following are the new features and enhancements:

Virtual hosting pool credentials updated correctly when entered in Configuration Wizard

Previously, the console did not always save updated virtual hosting pool credentials, which caused connection failures even when correct credentials were supplied.

With the 2607 LTSR release, credentials entered during setup are now reliably stored and used.

Configuration Wizard preserves existing service principal names instead of always removing and recreating them

The Configuration Wizard now checks service principal name (SPN) ownership before making changes. It modifies an SPN only when necessary and reports a clear error if registration fails. This behavior avoids unnecessary SPN removal and reduces the risk of Kerberos authentication disruptions when you reconfigure a provisioning server.

TLS 1.3 now used for console connections on Server 2022 and Windows 11

The PVS console now negotiates TLS 1.3, in addition to TLS 1.2, for outbound connections such as telemetry uploads and vCenter communication on Windows Server 2022 and Windows 11 hosts. This behavior ensures that the console offers the strongest available protocol, even when Citrix Cloud components might otherwise restrict connections to TLS 1.2.

Support for the New Microsoft SecureBoot CA Certificates

As documented by Microsoft at Windows Secure Boot certificate expiration and CA updates - Microsoft Support, the current certificates used for validating binaries when using Secure Boot are expiring in 2026 and have been replaced by new CA certificates which will be used in the future to validate that binaries are properly signed. This release of Citrix Provisioning includes support for secure boot when these new certificates are being used. See Windows Secure Boot certificate expiration and CA updates for details on how you can prepare for supporting secure boot once this has happened.

It is vital that you start the process of upgrading the hypervisor and existing VMs as well as upgrading to a version of Citrix Provisioning that supports the new certificates now to avoid outages starting in June 2026.

For more information, see Windows Secure Boot certificate expiration and CA updates.

Support for creating Citrix Provisioning catalogs in OpenShift virtualization environments using Studio

With Studio, you can now create Citrix Provisioning catalogs in OpenShift virtualization environments. Previously, you had to switch between different consoles to provision and manage those catalogs. This feature simplifies the process, letting you perform provisioning and power management tasks entirely within Studio. For more information, see Create Citrix Provisioning catalogs in Citrix Studio.

Support for creating Citrix Provisioning catalogs in Citrix Web Studio™ for Nutanix AHV Prism Central

You can now create a Citrix Provisioning catalog using Web Studio with the Nutanix AHV Prism Central host connection type.

This implementation offers the following advantages:

  • A single console to manage both MCS and Citrix Provisioning catalogs.

  • New features for Citrix Provisioning catalogs, such as identity management.

For more information, see Change NICs

What’s new