Citrix Virtual Apps & Desktop 7 2209

Citrix have released a new version of Citrix Virtual Apps and Desktop 7 2209.
Citrix is now supporting 10-Bit high dynamic range (HDR) which have been demanded for customers for a while, so its great to see this feature is final here for companies that are creating rich media entertainment content where 10-Bit is required.
Release 7 2209 is now available for download, 20th September, 2022.
Citrix Virtual Apps & Desktop 7 2209 is a CR release. Read more about CR here
Citrix Virtual Apps (former name: XenApp) Citrix Virtual Desktop (former name: XenDesktop)
Citrix raises the bar of for user experience and new product release of following technologies:
- Director 2209
- Citrix Licensing 11.17.2 build 39000
- Virtual Delivery Agents 2209 for ServerOS and ClientOS
- Virtual Delivery Agent 2209 for Linux
- Citrix Federated Authentication Service 2209
- Citrix Provisioning 2209
- Profile Management 2209
- Workspace Environment Management 2209
- Session Recording 2209
- Citrix Virtual Apps and Desktop Service (September 2022)
- Citrix Virtual Apps and Desktop Standard for Azure (September 2022)
- Citrix Cloud Health Check
- Workspace App 2209 for Windows
- Workspace App 2209 for Linux
- Workspace App 2209 for Chrome
- Workspace App 2209 for Android
- Workspace App 2209 for MacOS
- Workspace App 2209for HTML5
- Workspace App 2209 for ChromeOS
What’s new in Citrix Virtual Apps and Desktop 7 2209
Install and upgrade: Workspace Environment Management agent
The Workspace Environment Management agent is no longer included as an additional component in the VDA installation. To install it, use the full-product installer on the Citrix Virtual Apps and Desktops product ISO. For more information, see Install core components.
NOTE:
The Workspace Environment Management Agent installer is not localized. It is available only in English.
Citrix Studio
Citrix Virtual Apps and Desktops REST APIs (preview)
This release provides you with a set of REST APIs. You can use them to automate the management of resources within your Citrix Virtual Apps and Desktops deployment. For more information, see SDKs and APIs.
Machine Creation Services (MCS)
Support for RestrictedKrbHost SPN registration
All Citrix MCS created computer accounts are now registered with RestrictedKrbHost Service Principal Names (SPN). This avoids the requirement to run the setspn
command to register the SPN for the computer accounts after MCS creates them.
Support for identifying Citrix Hypervisor resources created by MCS
You can now identify Citrix Hypervisor resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Support for identifying Microsoft System Center Virtual Machine Manager resources created by MCS
You can now identify Microsoft System Center Virtual Machine Manager (SCVMM) resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Support for identifying VMware resources created by MCS
You can now identify VMware resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Ability to change the network setting for an existing provisioning scheme
You can now change the network setting for an existing provisioning scheme so that the new VMs are created on the new subnetwork. Use the parameter NetworkMapping
in the Set-ProvScheme
command to change the network setting. Only the newly provisioned VMs from the scheme will have the new subnetwork settings. You must also make sure that the subnetworks are under the same hosting unit. For more information, see Change the network setting for an existing provisioning scheme.
Ability to reset the OS disk of a persistent VM in an MCS created machine catalog
In VMware virtualization environments, you can now use the PowerShell command Reset-ProvVMDisk
to reset the OS disk of a persistent VM in an MCS created machine catalog. The feature automates the process of resetting the OS disk. For example, it helps in resetting the VM to its initial status of a persistent development desktop catalog created using MCS. For more information on using the PowerShell command to reset the OS disk, see Reset OS disk.
Support for direct upload or download from EBS on Amazon Web Services (AWS)
AWS now provides API to allow direct creation of EBS volume with desired content. You can now use the API to eliminate volume worker requirement for catalog creation and VM addition. For information on AWS permissions required for this functionality, see AWS cloud environments.
Machine catalogs with Trusted launch
In Azure environments, you can create machine catalogs enabled with Trusted launch, and use SupportsTrustedLaunch
property of VM inventory to determine the VM sizes that support Trusted launch.
Trusted launch is a seamless way to improve the security of generation 2 VMs. Trusted launch protects against advanced and persistent attack techniques. For more information, see Machine catalogs with Trusted launch.
Support for machine profile in GCP
When you create a catalog to provision machines using Machine Creation Services (MCS) in Google Cloud Platform (GCP) environments, you can now use a machine profile to capture the hardware properties from a virtual machine and apply them to the newly provisioned VMs in the catalog. When MachineProfile
parameter is not used, the hardware properties are captured from the master image VM or snapshot.
Machine profiles work with both Linux and Windows operating systems.
For information on how to create a machine catalog with a machine profile, see Create a machine catalog using a machine profile.
Support for updating MCS provisioned machines in GCP environments
In GCP environments, Set-ProvScheme
changes the template (provisioning scheme) and does not affect existing machines. Using the PowerShell command Request-ProvVMUpdate
, you can now apply the current provisioning scheme to an existing machine (or set of machines). Currently, in GCP, the property update supported by this feature is machine profile. For more information, see Update provisioned machines using PowerShell.
Support for machine catalog creation using an image from a different subscription in the same Azure tenant
Previously, in Azure environments, you could only select an image within your subscription to create a machine catalog. With this feature, you can now select an image in Azure Compute Gallery (formerly Shared Imaged Gallery) that belongs to a different shared subscription to create and update MCS catalogs.
For more information on creating a catalog, see Create a machine catalog using an Azure Resource Manager image.
For information on sharing image with another service principal in the same tenant, see Image sharing with another service principal in the same tenant.
For information on PowerShell commands to select an image from a different subscription, see Using PowerShell to select an image from a different subscription.
For more information on Azure Compute Gallery, see Azure Shared Image Gallery.
Microsoft Teams Optimization
Microsoft Teams optimization policy notification
The following error message appears, prompting the user to restart Microsoft Teams when launched in the wrong optimization mode:
- Microsoft Teams failed to load with the right Citrix policy. Please restart Microsoft Teams
This occurs when the Delivery Controller Teams optimization policy reaches the VDA after Microsoft Teams has started.
Virtual Delivery Agents (VDAs) 7 2209 for Windows Desktop/Server OS.
Support for configuring UPS timeouts
Starting with Citrix Virtual Apps and Desktops 7 2209, it is possible to configure the socket timeouts that the VDA uses when communicating with a Universal Print Server. The default timeouts have been reduced to allow the Citrix Print Manager Service to quickly detect an offline Universal Print Server. The following three policy settings have been added:
- Universal Print Server web service (HTTP/SOAP) connect timeout: Specifies the number of seconds that the Universal Print Client must wait until a Universal Print Server web service connect() operation times out.
- Universal Print Server web service (HTTP/SOAP) receive timeout: Specifies the number of seconds that the Universal Print Client must wait until a Universal Print Server web service recv() operation times out.
- Universal Print Server web service (HTTP/SOAP) send timeout: Specifies the number of seconds that the Universal Print Client must wait until a Universal Print Server web service send() operation times out.
The preceding new policy settings allow you to customize the connect, receive, and send TCP socket operations timeouts.
10-Bit High Dynamic Range (HDR)
With 10-bit High Dynamic Range (HDR) virtual desktop sessions, you can use enhanced encoding and decoding capabilities to render high quality images and videos with an extended range of colors, and greater contrast and brightness. Also, you can customize the white luminance level, Extended Display Identification Data (EDID), and visual quality to improve the user experience. For more information, see 10-Bit High Dynamic Range.
Enhancement to Build to lossless setting
This enhancement improves build to lossless functionality. Performance is increased to match full-screen video codec modes. Also, build to lossless now builds outward from the area of mouse activity.
Virtual Delivery Agents (VDAs) 7 2209 for Linux
Version 2209 of the Linux VDA includes the following new features and enhancements:
Support for RHEL 8.6, Rocky Linux 8.6, and Ubuntu 22.04
We have added RHEL 8.6, Rocky Linux 8.6, and Ubuntu 22.04 as supported distributions.
Federated Authentication support for SSSD- and PBIS-joined Ubuntu and SUSE VDAs
We have extended the support of Federated Authentication Service (FAS) to the following types of VDAs:
- Ubuntu VDAs that are joined to the domain using SSSD and PBIS
- SUSE VDAs that are joined to the domain using SSSD.
You can now use FAS to authenticate users logging on to those VDAs. For more information, see Federated Authentication Service.
Custom desktop environments by session users
Session users can now customize their desktop environments. To enable this feature, you must install desktop environments on the VDA in advance. For more information, see Custom desktop environments by session users.
GPG signing
We have signed the Linux VDA package using GPG so that you can verify the integrity of the Linux VDA package by using the public key.
Citrix Federated Authentication Service 2209
This release of Federated Authentication Service includes no new features.
For information about bug fixes, see Fixed issues.
Citrix Provisioning 2209
Support for deleting target VMs on GCP
You can now delete Google Cloud Platform (GCP) target VMs provisioned through the Citrix Virtual Apps and Desktops Setup wizard from the following:
- Hypervisor
- Provisioning server database
- Delivery Controller
- Active Directory account created or associated with the target device
- Machine catalog entries from the Citrix Cloud Connector
For more information on deleting target VMs on GCP, see Delete target VMs on GCP.
Removed support for uploading problem report to CIS
Citrix Provisioning no longer supports uploading problem report to CIS. You can, however, save diagnostic reports to a shared network drive. Citrix customer support provides instructions on making the diagnostic bundle available to them. We have made the following changes:
- The Problem Report Configuration page in the Citrix Provisioning Configuration wizard has been removed.
- In the Citrix Provisioning Console, the option Upload Diagnostics on the Problem Report page has been removed. You can now save the diagnostics only locally.
- In the Farm Properties dialog, the Problem Report tab has been removed.
For more information on CIS problem reporting, see CIS Problem Reporting.
Removed support for CEIP
Citrix Provisioning no longer participates in the Customer Experience Improvement Program (CEIP). It no longer sends anonymous statistics and usage information to Citrix.
Citrix Profile Management 2209
File deduplication policies to reduce storage cost for the user store
Identical files can exist among various user profiles in the user store. With the new policies enabled, Profile Management removes duplicate files from the user store and stores one copy of them in a central location. Doing so avoids file duplications in the user store, thus saving your storage cost. For more information, see Enable file deduplication.
Ability to replicate the profile container for profile redundancy
With the profile container enabled for the full user profile, you can now replicate the container to multiple paths using the Replicate user stores policy. Doing so provides profile redundancy for user logons. For more information, see Replicate user stores.
Enable OneDrive container policy generally available
Previously available as a preview, the Enable OneDrive container policy is now generally available. For more information, see Enable OneDrive container.
Citrix Workspace Environment Management 2209
Ability to import Group Policy settings from registry files
Starting with this release, you can convert registry values that you export using the Windows Registry Editor into GPOs for management and assignment. If you are familiar with the Import registry files option available with Registry Entries, this feature:
- Lets you import registry values under both
HKEY_LOCAL_MACHINE
andHKEY_CURRENT_USER
. - Lets you import registry values of the
REG_BINARY
andREG_MULTI_SZ
types. - Supports converting delete operations associated with registry keys and values that you define in .reg files.
For more information, see Group Policy Settings.
External task
This release includes enhancements to the external task feature. The feature now provides you with three additional options to control when to run external tasks:
- Disconnect. Controls whether to run the external task when a user disconnects from a machine where the agent is running.
- Lock. Controls whether to run the external task when a user locks a machine where the agent is running.
- Unlock. Controls whether to run the external task when a user unlocks a machine where the agent is running.
For more information, see External Tasks.
Profile Management
Workspace Environment Management now supports all versions of Profile Management through 2209. The following new option is now available in the Administration Console > Policies and Profiles > Citrix Profile Management Settings > Advanced Settingsinterface.
- Enable OneDrive container. If enabled, Profile Management roams OneDrive folders with users by storing the folders on a VHDX disk. The disk is attached during logons and detached during logoffs.
Citrix Session Recording 2209
Recording access control
You can now place access restrictions on target recordings in addition to role-based access control through recording viewing policies. Restricted recordings are accessible only to users and user groups that are assigned the PrivilegedPlayer role through the Session Recording Authorization Console. For more information, see Place access restrictions on recordings in the web player and Place access restrictions on recordingsin the Session Recording player.
Citrix Virtual Apps and Desktops service
September 2022
New and enhanced features
Older versions of the Remote PowerShell SDK are now deprecated. If you are using a deprecated version, the SDK stops working and you see an error message prompting you to download the current version. If this happens, download the latest Remote PowerShell SDK from the Citrix website.
Machine catalogs with Trusted launch in Azure. In Azure environments, you can create machine catalogs enabled with Trusted launch, and use the SupportsTrustedLaunch
property of the VM inventory to determine the VM sizes that support Trusted launch.
Trusted launch is a seamless way to improve the security of Generation 2 VMs. Trusted launch protects against advanced and persistent attack techniques. For more information, see Machine catalogs with Trusted launch.
Support for identifying Microsoft System Center Virtual Machine Manager resources created by MCS. You can now identify Microsoft System Center Virtual Machine Manager (SCVMM) resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Support for identifying VMware resources created by MCS. You can now identify VMware resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Support for optimizing AWS Workspace throttling. You can now power on and off a large number of machines in an AWS Workspace without encountering throttling issues. Throttling issues occur when the number of requests sent to AWS Workspace exceeds the number of requests that the server can handle. Therefore, Citrix now groups multiple requests into one single request before sending it to the AWS Workspace SDK.
Ability to check machine details when viewing machine counts in Home. When viewing machine counts by availability state in Home, you can now click a state to view details of machines in that state. For more information, see Home page for the Full Configuration interface.
Support for machine catalog creation using an image from a different subscription in the same Azure tenant. Previously, in Azure environments, you could only select an image within your subscription to create a machine catalog. With this feature, you can now select an image in Azure Compute Gallery (formerly Shared Imaged Gallery) that belongs to a different shared subscription to create and update MCS catalogs.
For more information on creating a catalog, see Create a machine catalog using an Azure Resource Manager image.
For information on sharing image with another service principal in the same tenant, see Image sharing with another service principal in the same tenant.
For information on PowerShell commands to select an image from a different subscription, see Using PowerShell to select an image from a different subscription.
For more information on Azure Compute Gallery, see Azure Shared Image Gallery.
August 2022
New and enhanced features
Support for identifying Citrix hypervisor resources created by MCS. You can now identify Citrix hypervisor resources created by MCS using tags. For more information on the tags that MCS adds to the resources, see Identify resources created by MCS.
Support for using host groups and Azure availability zones at the same time. In Azure environments, there is now a pre-flight check to assess whether the creation of a machine catalog will be successful based on the Azure availability zone specified in the custom property and the host group’s zone. Catalog creation fails if the availability zone custom property does not match the host group’s zone.
A host group is a resource that represents a collection of dedicated hosts. A dedicated host is a service that provides physical servers that host one or more virtual machines. Azure availability zones are physically separate locations within each Azure region that are tolerant to local failures.
For more information on the various combinations of availability zone and host group zone that result in successful or failed the machine catalog creation, see Using host groups and Azure availability zones at the same time.
Support for updating the folder ID of a machine catalog in VMware. In VMware virtualization environments, you can now update the folder ID of an MCS machine catalog using the custom property FolderID
in Set-ProvScheme
. The VMs created after updating the folder ID are created under this new folder ID. If this property is not specified in CustomProperties
, then VMs are created under the folder where the master image is located. For more information on updating the folder ID, see Update the folder ID of a machine catalog.
Time zone setup. You can now configure the date and time format of the interface to suit your preferences using the Date and time setting. For more information, see Time zone setup.
Image Portability Service (IPS) now supports Amazon Web Services (AWS). By configuring the required permissions and components for AWS, IPS workflows can be used with an AWS account. See Migrate workloads to public cloud for more details.
Page file setting during image preparation in Azure environments. In Azure environments, you can now avoid potential confusion with the page file location. To that end, MCS now determines the page file location when you create the provisioning scheme during image preparation. This calculation is based on certain rules. Features like ephemeral OS disk (EOS) and MCS I/O have their own, expected page file location, and are exclusive to each other. Also, if you decouple image preparation from provisioning scheme creation, MCS correctly determines the page file location. For more information on page file location, see Page file location.
Support for updating page file setting in Azure environments. While creating a catalog in an Azure environment, you can now specify the page file setting, including its location and the size, using PowerShell commands. This overrides the page file setting determined by MCS. You can do this by running the New-ProvScheme
command with the following custom properties:
PageFileDiskDriveLetterOverride
: Page file location disk drive letterInitialPageFileSizeInMB
: Initial page file size in MBMaxPageFileSizeInMB
: Maximum page file size in MB
For more information on updating the page file setting, see Update page file setting.
Updates to the Home page. The Get Started widget now has a new look and feel. Other updates to the Home page include:
- The newly added Refresh and Help icons in the upper right corner.
- Clickable resource counts, providing quick access to relevant resource pages.
- Enhancement to the Dislike icon. If you dislike a recommendation, the recommendation disappears. If you dislike the recommendation widget, the widget disappears.
For more information, see Home page.
Support for enabling Azure VM extensions. When using an ARM template spec as a machine profile to create a machine catalog, you can now add Azure VM extensions to the VMs in the catalog, view the list of supported extensions, and remove extensions you added. Azure VM extensions are small applications that provide post-deployment configuration and automation tasks on Azure VMs. For example, if a VM requires software installation, antivirus protection, or the ability to run a script inside it, you can use a VM extension. For more information on how to enable Azure VM extensions, see Use PowerShell to enable Azure VM extensions.
Trusted launch support for ephemeral OS disk. You can now create provisioning schemes using ephemeral OS disk on Windows with trusted launch. Trusted launch is a seamless way to improve the security of generation 2 VMs. It protects against advanced and persistent attack techniques by combining technologies that can be independently enabled like secure boot and virtualized version of trusted platform module (vTPM). For more information on creating a machine catalog, see Create a machine catalog using an Azure Resource Manager image.
July 2022
New and enhanced features
Dynamic session timeouts for single-session OS machines. Dynamic session timeouts now support single-session OS machines. A delivery group with at least one VDA of version 2206 or later is required. Ensure that those VDAs have registered with Citrix Cloud at least once. For more information, go to Dynamic session timeouts.
Send logoff reminders without forcing user logoff in Autoscale. A new feature is now available in User Logoff Notifications (formerly Force User Logoff) in Autoscale. The feature lets you send logoff reminders to users without forcing them to log off. Doing that avoids potential data loss caused by forcing users to log off from their sessions. See User logoff notifications for details.
Ability to set the Linux OS license type when creating Linux VM catalogs in Azure. Using the Full Configuration interface, you can now choose the Linux OS license type when creating Linux VM catalogs in Azure. You have two choices for bring-your-own Linux licenses: Red Hat Enterprise Linux and SUSE Linux Enterprise Server. For more information, see Create a machine catalog using an Azure Resource Manager image.
Enhanced search experience in Full Configuration. The Search node provides the following new features and enhancements:
- Ability to export search results. You can now export search results. To do that, click the export icon in the upper right corner.
- New filter available. A filter, Pending Power Action, is now available for use. Use the filter to refine your search.
- “Does not contain” search support for certain items. Items such as machine names and tags now support “Does not contain” search criteria.
- Support for searching for objects when adding filters. When adding filters for the following objects, you can now search for them: connections, machine catalogs, delivery groups, application groups, and tags.
For more information, see Use Search in the Full Configuration management interface.
Support for VMware Storage Profiles. When you create a machine catalog using a master image on a vSAN Datastore, you can now copy the storage policy such as the RAID-1 or RAID-5 information from the master image to the created target devices. For existing catalogs, the storage policy remains unchanged even if you update the catalog.
Support for RestrictedKrbHost SPN registration. All the Citrix MCS created computer accounts are now registered with RestrictedKrbHost
Service Principal Names (SPN). This avoids the requirement to run the setspn
command to register the SPN for the computer accounts after MCS creates them.
App Packages in Full Configuration for delivering Microsoft packaged applications.The App-V node is renamed to App Packages and redesigned to accommodate more types of Microsoft packaged apps. Previously, you had to use the discovery module to add App-V packaged apps to your environment for delivery. You can now add and deliver the apps in one place by using the App Packages node. For more information, see App packages.
NOTE:
This feature is being rolled out in phases. It might not yet be activated for your account.
Support for using ARM template specs as machine profiles. Previously, you could use only VMs as machine profiles. You can now use ARM template specs as machine profiles as well when creating Azure machine catalogs. This feature lets you take advantage of Azure ARM template features such as versioning. To ensure that the selected spec is configured correctly and contains required configurations, we perform validation on it. If the validation fails, you are prompted to select a different machine profile. For more information, see Create a machine catalog using an Azure Resource Manager image.
Support for validating ARM template spec. You can now validate the ARM template spec to make sure that it can be used as a machine profile to create a machine catalog. There are two ways to validate the ARM template spec:
- Using the Full Configuration management interface.
- Using the PowerShell command.
For more information on validating the ARM template spec, see Create a machine catalog using an Azure Resource Manager image.
Citrix Virtual Apps and Desktops Standard for Azure
August 2022
- This feature is generally available: You can now create catalogs of machines joined to your Azure Active Directory. See Create catalogs.
Citrix Cloud Healthcheck
Cloud Health Check allows you to run checks that gauge the health and availability of the site and its components. You can run health checks for Virtual Delivery Agents (VDAs), StoreFront servers, and Profile Management. VDA health checks identify possible causes for common VDA registration, session launch, and time zone redirection issues.
If issues are present during the checks, Cloud Health Check provides a detailed report and the actions to fix the issues. Each time Cloud Health Check starts, it checks for the latest version of scripts on the Content Delivery Network (CDN) and automatically downloads the scripts if they do not exist on the local machine. Cloud Health Check always chooses the latest local version of scripts to run health checks.
Citrix Workspace App 2209 for Windows
What’s new
Quick Launch of Disconnected Desktops [Technical Preview]
By enabling this feature, you can open your previously disconnected desktops instantly. Once this feature is enabled, Citrix Workspace app launches the disconnected sessions in hidden mode. The session is instantly presented as soon as you launch the desktop.

NOTE:
This is applicable to Workspace (cloud) sessions only.
You can register for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It’s advised that Beta builds aren’t deployed in production environments.
Auto-update version control [Technical Preview]
Administrators can now manage the auto-update version for the devices in the organization.
Administrators can control the version by setting the range in the maximumAllowedVersion and minimumAllowedVersion properties in the Global App Config Service.
Example JSON file in Global App Config Service:
Copy
"AutoUpdate": {
"userOverride": false,
"AutoUpdatePluginsSettings": [
{
"pluginSettings": {
"upgradeToLatest": false,
"maximumAllowedVersion": "22.9.0.3934",
"minimumAllowedVersion": "22.9.0.3934",
},
"pluginName": "WorkspaceApp",
"pluginId": "1CDF566D-B2C7-47CA-802F-6283C862E1D6"
}
When the range is set, Citrix Workspace app on the user’s device is automatically updated to the highest available version that falls between the mentioned range.
If you want to auto-update Citrix Workspace app to a specific version, enter the same version in the maximumAllowedVersion and minimumAllowedVersion properties in the Global App Config Service.
NOTE:
- To achieve auto-update version control, upgradeToLatest setting in the Global App Config Service must be set to false. If this is true, maximumAllowedVersion and minimumAllowedVersion will be ignored.
- Do not modify the pluginId as this is mapped to Citrix Workspace app.
- If the administrator hasn’t configured the version in the Global App Config Service, Citrix Workspace app is updated to the latest available version by default.
To enable this feature:
- Launch the registry editor.
- Navigate to the
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\Dazzle
registry path. - Create a registry value with the following attributes:
- Registry key name: Test-EnableAUVersionControl
- Type: DWORD
- Value: 0 is disabled and greater than 0 is enabled
- Restart the Citrix Workspace app for the changes to take effect.
You can provide feedback on this feature via the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Upgraded version of WebRTC for the optimized Microsoft Teams
The version of WebRTC that is used for the optimized Microsoft Teams is upgraded to version M98.
Supporting auto-update of Citrix Workspace app on VDA
You can now enable auto-update feature on VDA by creating the following registry value:
On 32-bit machine:
- Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ICA Client\AutoUpdate
- Registry Value: AllowAutoUpdateOnVDA
- Registry Type: REG_SZ
- Registry Data: True
On 64-bit machine:
- Registry Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\ICA Client\AutoUpdate
- Registry Value: AllowAutoUpdateOnVDA
- Registry Type: REG_SZ
- Registry Data: True
Improved virtual apps and desktops launch experience [Technical Preview]
Previously, the launch progress dialog box wasn’t very intuitive to the users. It made the users assume that the launch is stuck and close the dialog, as the notification messages were quite static.

The improved app and desktop launch experience is more informative, modern, and provides a user-friendly experience on Citrix Workspace app for Windows. This helps to keep the users engaged with timely and relevant information about the launch status. The notification appears in the bottom-right corner of your screen.

This feature is also supported on Workspace for Web. Users can view meaningful notifications about the launch progress, instead of just a spinner. If a launch is in progress and the user attempts to close the browser, a warning message is shown.

You can enable this feature using the registry.
- Open the registry editor.
- Navigate to
HKLM\SOFTWARE\WOW6432Node\Citrix\Dazzle
. - Create and add a registry string with the name as NewLaunchExpSupport and set its value as True.
- Restart Citrix Workspace app for the changes to take effect.
NOTE:
This is applicable to Workspace (cloud) sessions only.
Known issues:
- On a multi-monitor setup, the application windows in a desktop session of the Citrix Workspace app move to a different monitor. This issue occurs when you disconnect and reconnect a session.
- This feature is not supported for browser-based launch.
You can provide feedback on this feature via the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Citrix Enterprise Browser (formerly Citrix Workspace Browser)
This release includes Citrix Enterprise Browser version 103.2.1.10, based on Chromium version 103. For more information about the Citrix Enterprise Browser, see the Citrix Enterprise Browser documentation.
- Citrix Enterprise Browser ProfilesProfiles help you keep personal information such as history, bookmarks, passwords, and other settings separate for each of your Citrix Workspace accounts. Based on your Workspace store, a profile is created, allowing you to have a unique and personalized browsing experience.NOTE:After you upgrade to version 103.2.1.10 and sign in to the device for the first time, only your previously saved passwords are removed. When you sign in to the device
Citrix Workspace App 2209 for iOS
What’s new
Inactivity timeout for Citrix Workspace app sessions
Admins can specify the amount of idle time that is allowed. After the time-out value, an authentication prompt appears.
The inactivity timeout value can be set starting from 1 minute to 24 hours. By default, the inactivity timeout isn’t configured. Admins can configure the inactivityTimeoutInMinutesMobile property by using a PowerShell module. Click here to download the PowerShell modules for Citrix Workspace app configuration.
When you have reached the specified time-out value, the end-user experience is as follows depending on the authentication type configured:
- After the inactivity timeout, you will receive a prompt to provide biometric authentication to access the Citrix Workspace app again.
- If you can cancel the biometric authentication prompt, the following message appears:Citrix Workspace app is locked.You must authenticate to continue to use Workspace app.
If the passcode is not configured on the iOS, you have to sign in with credentials after the inactivity timeout.
NOTE:
This feature is applicable for customers on Workspace (Cloud) only.
iOS version support
Citrix Workspace app for iOS now supports iOS 16.
Provision to disable LaunchDarkly service
Starting with this release, LaunchDarkly service can be disabled on both on-premises and cloud stores.
Citrix Workspace App 2209 for Linux
What’s new
Support for authentication using FIDO2 [Technical Preview]
With this release, you can authenticate virtual apps or desktops by using FIDO2 security keys. FIDO2 security keys provide a seamless way for enterprise employees to authenticate to apps or desktops that support FIDO2 without entering a user name or password. For more information about FIDO2, see FIDO2 Authentication.
NOTE:
If you’re using the FIDO2 device through USB redirection, remove the USB redirection rule of your FIDO2 device from the
usb.conf
file in the$ICAROOT/
folder. This update helps you to switch to the FIDO2 virtual channel.
By default, FIDO2 authentication is disabled. To enable FIDO2 authentication, do the following:
- Navigate to the
<ICAROOT>/config/module.ini
file. - Go to the ICA 3.0 section.
- Set
FIDO2= On
.
This feature currently supports roaming authenticators (USB only) with PIN code and touch capabilities. You can configure FIDO2 Security Keys based authentication. For information about the prerequisites and using this feature, see Local authorization and virtual authentication using FIDO2.
When you access an app or a website that supports FIDO2, a prompt appears, requesting access to the security key. If you’ve previously registered your security key with a PIN (a minimum of 4 and a maximum of 64 characters), then you must enter the PIN while signing in.
If you’ve registered your security key previously without a PIN, simply touch the security key to sign in.
Limitation:
You might fail to register the second device to a same account using FIDO2 authentication.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Keyboard input mode enhancements [Technical Preview]
Previously, you were able to enable different keyboard input modes only by updating the value of KeyboardEventMode
in the configuration file. There was no UI option to select the keyboard input mode.
Starting with Citrix Workspace app 2209, you can configure different keyboard input modes from the newly introduced Keyboard input mode settings section. You can select Scancode or Unicode as keyboard input mode.
For more information, see Keyboard input mode enhancements in the Keyboard layout synchronization documentation.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Support for extended keyboard layouts [Technical Preview]
Starting with Citrix Workspace app version 2209, the Scancode keyboard input mode supports the following extended keyboard layouts:
- Japanese 106 keyboard
- Portuguese ABNT/ABNT2 keyboards
- Multimedia keyboards
The Scancode keyboard input mode supports the extended keyboard layouts along with all keyboard layout synchronization modes.
This support is enabled by default.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Microsoft Teams enhancements
- App sharing enabled: Starting with Citrix Workspace app 2209 for Linux and Citrix Virtual Apps and Desktops 2109, you can share an app using the Screen sharing feature in Microsoft Teams.
- Enhancements to high DPI support: When the high DPI feature is enabled and you’re using 4K monitors, Microsoft Teams video overlays are in the desired position and of the correct size. Irrespective of your display settings such as single or multi-monitor arrangements, overlays always appear correctly and aren’t scaled up or appear in an undesired position. To enable this enhancement, ensure that the
DPIMatchingEnabled
parameter in thewfclient.ini
configuration file is set to True. For more information, see Support for DPI matching. - WebRTC SDK upgrade: The version of the WebRTC SDK that is used for the optimized Microsoft Teams is upgraded to version M98.
Upgraded version of compatibility libraries
Starting with this release, Citrix Workspace app for Linux is compatible with the following libraries:
glibc
2.27 or laterglibcxx
3.4.25 or later
App Protection update
NOTE:
App Protection is not supported on Ubuntu 22.04. As a result, if you install the App Protection module on Ubuntu 22.04, you might not be able to start virtual apps and desktops in the Citrix Workspace app. For more information on App Protection, see App Protection.
Fixed issues
- When the App Protection feature is enabled, the anti-keylogging functionality might not work for the Authentication Manager interface that loads the web page in a separate window. [RFLNX-9004]
- After upgrading to Citrix Workspace app 2007 for Linux, adding a Store using Storebrowse might take long time as the Store attempts to contact the app config service that is unreachable. [CVADHELP-20618]
- When you connect to a cloud store from the self-service user interface, a spinning wheel might appear on the sign-in page. [CVADHELP-20039]
- When you start two apps from two different delivery groups, there might be a delay in starting the second app. [CVADHELP-18198]
Citrix Workspace App 2209 for Android
What’s new
Support for Android 13
Citrix Workspace app for Android 22.9.0 supports Android 13. Upgrading to Citrix Workspace app version to 22.9.0 ensures continuous support for devices that are updated to Android 13.
App switch
This feature enables an end user to switch between many published apps that are in the same session. When you tap the Switch icon, you can scroll to select an app and the app that is in focus is highlighted. You can view the app title, preview image, and window title.
When you open or close an app, the app count updates accordingly. If some apps are opened in another session, the app count includes all the opened ones.

Multi-display support on Samsung DeX
Samsung DeX (Desktop eXperience) is available on some high-end Samsung handheld devices. The DeX feature enables users to extend their device into a desktop-like experience by connecting a keyboard, mouse, and monitor.
You can connect your DeX-enabled device and the external display to extend the desktop session onto the external display that supports the DeX protocol. You can either extend or display different content on the Samsung DeX screen and the external display.
For more information, see Multi-display support on Samsung DeX
Support for webcam redirection Technical Preview
You can now redirect the front camera of your device into the session. Both 32-bit and 64-bit applications are supported. By default, the auto-redirection of the webcam is disabled.
NOTE:
This feature is a request-only preview. To get it enabled in your environment, fill out the Podio form https://podio.com/webforms/27883403/2183185. In case you have a firewall or proxy blocking outbound traffic, you need to enable traffic to LaunchDarkly. For more information see, Feature flag management.
Citrix Workspace App 2209 for Apple OSX
Sign out of custom web store when you close Citrix Workspace app
When the signoutCustomWebstoreOnExit setting is set to True, closing the Citrix Workspace app window signs you out of the custom web store. When you reopen the Citrix Workspace app, the web store URL is loaded again. You can configure the signoutCustomWebstoreOnExit setting in the Global App Configuration service.
Citrix Enterprise Browser
This release includes Citrix Enterprise Browser (formerly Citrix Workspace Browser) version 103.2.1.10, based on Chromium version 103. For more information about the Citrix Enterprise Browser, see the Citrix Enterprise Browser documentation.
Fixed issues in 2209
- Citrix Workspace app for Mac might start automatically when you restart Citrix Workspace app for Mac or install Citrix Workspace app. [RFMAC-12392]
- The screen sharing feature in Optimized Microsoft Teams for certain third-party apps might fail on Citrix Workspace app for Mac. The issue occurs when the Thinwire codec policy is set to For entire screen. As a result, the app sharing feature is disabled and no options are available in the sharing panel. [CVADHELP-20853]
Citrix Workspace App 2209 for HTML5
Microsoft Teams optimization screen sharing
In earlier versions, the screen sharing functionality was disabled by default. Starting with version 2209, by default, the screen sharing is enabled. The end users can now share apps and tabs that are opened through Citrix Workspace app.
For more information, see Screen sharing section.
Citrix Workspace App 2209 for Chrome OS
Generic Client IME for East Asian languages
The Generic Client Input Method Editor (IME) feature enhances the input and display experience with Chinese, Japanese, and Korean (CJK) language characters. This feature allows you to compose CJK characters at the cursor position when you are in a session. The feature is available for the Windows VDA and Linux VDA environments.
For more information, see Generic Client IME for East Asian languages documentation.
Service continuity Technical preview
Service continuity removes or reduces the dependency on the availability of components that are involved in the connection process. You can launch the Citrix Virtual Apps and Desktops and Citrix DaaS regardless of the health status of the cloud services. In other words, service continuity allows you to connect to the DaaS apps and desktops during outages. As a prerequisite, your device must maintain a network connection to a resource location.
For more information, see the Service continuity section in the Citrix Workspace documentation.