So was looking at getting our lab boxes up from their current 7.11 to the latest and greatest (is it me or is the upgrade churn from citrix accelerating?).
Had an issue post reboot it kept giving me a “mandatory upgrade” loop ? luckily it being Friday by google luck held up and stumbled on this CTX article
https://support.citrix.com/article/CTX220452 – so indeed in my instance FIPS as at play and was enabled so was able to disable as I was operating from a lab but in the enterprise one to bear in mind if it is enabled as no permanent fix in till 7.13