Product Documentation
ADC
14.1-Current Release 13.1 12.1
View PDF

Pre-upgrade validation checks for NetScaler

February 26, 2026
Contributed by: 
C S

Note:

This feature is available in NetScaler release 14.1 build 66.x and later.

Pre-upgrade validation checks are built into the upgrade workflow to ensure safer system upgrades and confirm that the system is ready for the upgradation process. The following are the prechecks added to the upgrade workflow.

Pre-check Description Status Default behavior and override Additional comments
EOL of file-based licensing
Checks whether the license mechanism in use from April 15, 2026 onwards is file-based licensing or LAS-based licensing. For more information, see EOL of file-based licensing.
  • SUCCESS: Using LAS-based licensing
  • FAILED: Using file-based licensing
 Not applicable
Older licensing mechanism (that is, file-based licensing) reaches end-of-life from April 15, 2026 and LAS-based licensing is required.
License expiry check
Verifies both contract and runtime license validity.
  • SUCCESS: License active
  • FAILED: License expired
 Not applicable
Expired licenses might block data path or feature availability.
License server connectivity (Pooled licensing)
Ensures that NetScaler can reach the license server. Required for pooled licensing environments.
  • SUCCESS: Connectivity intact
  • WARNING: Unable to connect
  • DEFAULT: Continue upgrade
  • OVERRIDE: use -E flag
 Connectivity issues might result in temporary degraded licensing behavior, but the upgrade is not blocked.
License server compatibility (Pooled licensing)
Validates that the license server version is compatible with the upgrade.
  • SUCCESS: Compatible
  • FAILED: Not compatible
 Not applicable
Run only if the connectivity check passes. Incompatible license servers (NetScaler Console) must be upgraded first.
Non-existent symbol used in nsapi_mgr calls in startup files
Ensures that startup scripts reference valid symbols to avoid boot time failures.
  • SUCCESS: all symbols found
  • WARNING: symbols not found
  • DEFAULT: Abort
  • OVERRIDE: use -p flag
 Missing symbols might break data path initialization or custom workflows.
New build compatibility with the NetScaler platform
Checks whether the hardware or the virtual platform supports the new build.
  • SUCCESS: Compatible
  • FAILED: Not compatible
 Not applicable
Ensures major hardware and software compatibility.
Custom HTTPD and SSHD configuration files
Checks for symlink based overrides of HTTPD or SSHD configurations.
  • SUCCESS: No symlinks
  • ADVISORY: Symlink exists
 Not applicable
Admins must verify custom configurations for post upgrade compatibility. For more information, see Upgrade considerations.
VPX resource requirements
Validates minimum memory requirements for VPX instances.
  • SUCCESS: Memory OK
  • FAILED: Minimum memory check failed
 Not applicable
Insufficient memory might cause upgrade failures or unstable operations.
Disk space on /flash and /var
 Validates the minimum disk space for upgrade package unpacking and operations.
  • SUCCESS: Sufficient space
  • FAILED: Insufficient space
 Not applicable
Low disk space might corrupt the upgrade or prevent the installation.
Conditions for upgrade to 14.1-66.x and later releases (direct upgrade from version 13.0 to 14.1 is blocked)
Validates that the current firmware is eligible for upgrade.
  • SUCCESS: Allowed
  • FAILED: Not allowed
 Not applicable
Step upgrade enforced. For example, a direct upgrade from 13.0 to 14.1-66.x is blocked.
Platform check: FIPS to NON-FIPS
Checks if platform restrictions block upgrade to a FIPS build.
  • SUCCESS: Allowed
  • FAILED: Not allowed
 Not applicable
FIPS compliance prevents installing FIPS builds on non-FIPS platforms.
Check for unsaved configuration
Detects unsaved running configuration.
  • SUCCESS: Config saved
  • WARNING: Config not saved
  • DEFAULT: Abort
  • OVERRIDE: use –ignore_unsaved_config flag
 Unsaved configuration might result in a loss of configuration after rebooting.
HA sync check
Checks if the configuration is in sync between the HA nodes.
  • SUCCESS: In sync
  • WARNING: Not in sync
  • DEFAULT: Abort
  • OVERRIDE: use –ignore_unsynced_config flag
 Required to avoid split-brain or post-upgrade failover issues.
Perpetual license subscription advantage (SA) expiry (Flexera)
Checks if SA is valid for perpetual licenses.
  • SUCCESS: SA valid
  • FAILED: SA expired
 Not applicable
SA expiry blocks the upgrade due to license entitlement enforcement.
SSL certificate file integrity
Verifies SSL certificate file integrity using digest checks.
  • SUCCESS: All good
  • WARNING: Verification failed
  • DEFAULT: Abort
  • OVERRIDE: use –C flag
 Corrupt or missing certificates might disable SSL features.

EOL of file-based licensing

Note:

These checks come into effect from April 15, 2026.

File-based licensing will be EOL from April 15, 2026. All NetScaler (ADC, SVM) instances must be upgraded to LAS-compliant versions and transitioned to use LAS-based licensing before this date.

The minimum required NetScaler versions that are LAS compatible are:

  • NetScaler ADCs: 14.1-51.80, 13.1-60.29, 13.1-37.247 (FIPS)

  • NetScaler SVM: 14.1-51.83, 13.1-60.30

After April 15, 2026, in NetScaler ADC and SVM release 14.1-66.x and later, an upgrade related check will be triggered before NetScaler upgrade. This check validates if your NetScaler (ADC, SVM) is still using file-based licensing, and if true, the upgrade would be blocked with an error “NetScaler Upgrade Blocked: File based licensing in use”. This precaution avoids your NetScaler instances from proceeding with the upgrade and becoming unlicensed after April 15, 2026.

Contact Citrix Support or your ATS representative to understand how you can unblock the upgrade and the risks involved with it.

The following screenshot shows the message in the NetScaler GUI.

Pre-upgrade validation results

The following screenshot shows the message in the NetScaler CLI.

NetScaler CLI

The following screenshots show the messages in NetScaler Console.

  • When file-based licensing is in use, and the contract date has expired. NetScaler Console

  • When file-based licensing is in use, which has reached EOL on April 15, 2026. NetScaler Console2

  • When file-based licensing is in use, and the SA date has expired. NetScaler Console3

The following message appears in the NetScaler API response.

File based licensing is currently in use on your NetScaler. File based licensing is EOL from 15th April 2026 and the upgrade you are trying to perform would result in your NetScaler instance becoming unlicensed after the upgrade. Hence the upgrade has been blocked. Contact Citrix Support or your ATS representative for further information.

Pre-upgrade validation checks for NetScaler
February 26, 2026
Contributed by: 
C S
February 26, 2026
Contributed by: 
C S

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.