Citrix Virtual Apps & Desktop 7 2212
Citrix have released a new version of Citrix Virtual Apps and Desktop 7 2212.
Release 7 2212 is now available for download, 20th December, 2022.
Citrix Virtual Apps & Desktop 7 2212 is a CR release. Read more about CR here
Citrix Virtual Apps (former name: XenApp) Citrix Virtual Desktop (former name: XenDesktop)
Citrix raises the bar of for user experience and new product release of following technologies:
- Director 2212
- Citrix Licensing 11.17.2 build 41000
- Virtual Delivery Agents 2212 for ServerOS and ClientOS
- Virtual Delivery Agent 2212 for Linux
- Citrix Federated Authentication Service 2212
- Citrix Provisioning 2212
- Profile Management 2212
- Workspace Environment Management 2212
- Session Recording 2212
- Citrix Virtual Apps and Desktop Service (December 2022)
- Citrix Virtual Apps and Desktop Standard for Azure (December 2022)
- Citrix Cloud Health Check
- Workspace App 2212 for Windows
- Workspace App 2212 for Linux
- Workspace App 2212 for Chrome
- Workspace App 2212 for Android
- Workspace App 2212 for MacOS
- Workspace App 2212 for HTML5
- Workspace App 2212 for ChromeOS
What’s new in Citrix Virtual Apps and Desktop 7 2212
Install and upgrade: Web Studio (preview)
Web Studio is a web-based management console that lets you configure and manage your on-premises Citrix Virtual Apps and Desktops deployment. It’s designed for an improved user experience and generally responds faster than Citrix Studio, the Windows-based management console.
To install Web Studio, use the full-product installer on the Citrix Virtual Apps and Desktops product ISO. When installing a Delivery Controller, you can also choose to include Web Studio in the installation. For quick deployment, we recommend that you install Web Studio along with a Delivery Controller. For more information, see Install and use Web Studio.
Support for delivering MSIX and MSIX app attach apps using Web Studio
In App packages, you can now add MSIX and MSIX app attach packaged apps, and deliver them to your users. For more information, see App packages.
Generic USB configuration and policy improvements
This release includes three new policy settings to manage USB device selection and auto-connection user experience preferences through Citrix Studio.
The new USB device rules policy gives you full control over USB composite devices including device splitting and auto-connection behavior which supersedes the older device rules policy.
Two new policy settings in Citrix Workspace app for Windows allow you to override the user experience preferences that control the device auto-connection.
Citrix Studio
Support for using Studio to provision machines on GCP
Using Studio, you can now create catalogs to provision machines in GCP environments. For more information, see Create a machine catalog
Machine Creation Services (MCS)
Support for scheduling configuration updates in Azure
In Azure environments, you can now schedule a time slot for the configuration updates of the existing MCS provisioned machines using the PowerShell command Schedule-ProvVMUpdate. Any power on or restart during the scheduled time slot applies a scheduled provisioning scheme update to a machine. You can also cancel the configuration update before the scheduled time using Cancel-ProvVMUpdate.
You can schedule and cancel the configuration update of:
- A single or multiple VMs
- An entire catalog
For more information, see Schedule configuration updates.
Limit host groups scope in SCVMM Host Connection
Previously, host connection to SCVMM required the admin to have a single top level host group configured. This implies that the admin had visibility to all host groups, clusters, or hosts beneath the single top level host group. With this feature, in large deployments where a single SCVMM manages multiple clusters in different data centers, you can now limit the host groups scope of the admins. To do this, you can use the Delegated Admin role in the Microsoft System Center Virtual Machine Manager (VMM) console to select the host groups to which an admin must have access. For more information, see Install and configure a hypervisor.
Support for using Citrix ready images directly from Google Cloud Marketplace
You can now browse and select images offered by Citrix on the Google Cloud Marketplace to create MCS catalogs. Currently, MCS supports only the machine profile workflow for this feature. For more information, see Google Cloud Marketplace.
Support for updating machine profile and additional custom properties of MCS provisioned machines in Azure environments
Previously, in Azure environments, you could use Request-ProvVMUpdate to update the ServiceOffering custom property of an MCS provisioned machine. Now, you can also update the machine profile and the following custom properties:
- StorageType
- WBCDiskStorageType
- IdentityDiskStorageType
- LicenseType
- DedicatedHostGroupId
- PersistWBC
- PersistOsDisk
- PersistVm
For more information, see Update provisioned machines to current provisioning scheme state.
Support for changing the storage type to a lower tier when a VM is shut down in Azure environments
In Azure environments, you can now save storage costs by switching the storage type of a managed disk to a lower tier when you shut down a VM. To do this, use the StorageTypeAtShutdown custom property. The storage type of the disk changes to a lower tier (as specified in the StorageTypeAtShutdown custom property) when you shut down the VM. After you power on the VM, the storage type changes back to the original storage type (as specified in StorageType or the WBCDiskStorageType custom property).
For more information, see Change the storage type to a lower tier when a VM is shut down.
Enable restart schedule for an MCS catalog
Previously, you could schedule image updates by waiting for the next restart or by triggering an immediate restart of all VMs. With this feature, you can now create a one-time restart schedule for a catalog to be triggered on a desired date and time to facilitate MCS image updates. To create a restart schedule, use the BrokerCatalogRebootSchedule command. For more information, see Update the catalog.
Update to MCS time synchronization
With this feature, NT5DS is the default time synchronization protocol in scenarios where:
- The master image is non-domain-joined (NDJ) and
- During MCS provisioning, you select the VM to be Active Directory (AD) or Hybrid Azure Active Directory (HAAD)
For more information, see MCS time synchronization.
Citrix Director
Real-time GPU Utilization available for AMD GPUs
You can now see GPU Utilization of AMD Radeon Instinct MI25 GPUs and AMD EPYC 7V12(Rome) CPUs on Director. Director already supports the NVIDIA Tesla M60 GPUs. GPU Utilization displays graphs with real-time percentage utilization of the GPU, the GPU memory, and of the Encoder and the Decoder to troubleshoot GPU-related issues on multi-session and single-session OS VDAs. For more information, see GPU Utilization.
Advanced Probe Scheduling
Improved scheduling of Application and Desktop Probes can now be done from Director. Using this feature, Citrix Probe Agent can be configured to run the probe tasks on specific days of the week and repeated at specified intervals during the day. This allows you to schedule a single probe task to repeat at specific times of the day and the week. You can now proactively check your site health with probes set to run regularly at suitable times. This feature simplifies probe setup and management in Monitor. For more information, see Application Probing and Desktop Probing.
Citrix Licensing 11.17.2 build 41000
ollect device IDs along with timestamp
Starting with this release, device IDs along with the timestamp of the systems that use the Citrix Concurrent license are collected as part of the Citrix Licensing Telemetry data.
Virtual Delivery Agents (VDAs) 7 2212 for Windows Desktop/Server OS.
Enhancement to Citrix Universal Printer
Citrix Universal Printer now lets you select the client’s default printer or a specific client printer as the printing destination. To select a printer, use the new Destination Printerfield in the Printing Preferences dialog. For more information, see Auto-created client printers.
Published application fix enabled by default
A published application fix, which addresses the following compatibility issues with HDX published applications, is now enabled by default:
- Microsoft Office password prompt might not appear.
- Devices such as Printers & Scanners might not appear in the Settings menu.
- Newly created folders might not show up in the File Explorer application.
- Open Settings in the File Explorer menu does not work.
- In applications such as Microsoft Word or Microsoft Excel, when you rename, create, or delete a folder using the Save or Open option, the window does not refresh automatically. However, you can refresh the window manually.
- During the launch of a Universal Windows Platform (UWP) app, the app appears on the screen 8–13 seconds after the session completion progress bar of Citrix Workspace app disappears. As a result, users might attempt to do multiple launches.
- In an HDX seamless session on Windows 11 version 22H2, the print window might be displayed partially if a Print dialog box is open.
- The search bar of File Explorer does not work.
- Universal Windows Platform (UWP) apps cannot be launched successfully if a non-UWP app has been launched before.
Faster registration when using RODC
You can now select which Light Directory Access Protocol (LDAP) bindings to ignore when registering using a read-only domain controller (RODC). Use the ListofIgnoredBindingsregistry key to ignore unnecessary LDAP bindings. For more information, see LDAP binding sequencing during VDA registration using a read-only domain controller.
Adaptive audio update
Adaptive audio now works when using UDP audio delivery. For more information, see Adaptive audio.
Virtual Delivery Agents (VDAs) 7 2212 for Linux
Version 2212 of the Linux VDA includes the following new features and enhancements:
Support for RHEL 9.0 and Rocky Linux 9.0
We have added RHEL 9.0 and Rocky Linux 9.0 as supported distributions. For more information, see System requirements.
USB device redirection enhancements
We have made the following enhancements for USB device redirection:
- We now use USB/IP as the new virtual host controller for USB device redirection. Because, in most cases, the USB/IP kernel module is released with Linux kernel version 3.17 and later, you don’t have to build the kernel module by default.
- We have added support for USB 3.0 ports. You can now insert USB 3.0 devices into USB 3.0 ports on a client device.
- We have optimized bulk transfers and increased the transfer speed. The boost is more prominent for high latency environments.
- We have extended USB device redirection to more USB devices such as TD-RDF5A Transcend USB device and the composite USB device, Yubico YubiKey OTP+FIDO+CCID.
For more information, see USB device redirection.
Hardware acceleration for specific non-virtualized GPUs from NVIDIA
In the Linux VDA documentation, non-virtualized GPUs refers to:
- GPUs used in Remote PC Access scenarios
- GPUs passed through from a hypervisor
For HDX 3D Pro graphics to render with superior performance, we now enable hardware acceleration for specific non-virtualized GPUs from NVIDIA. For the specific non-virtualized GPUs, see the supported hardware section of the release notes for NVIDIA Linux Capture SDK.
For more information, see Non-virtualized GPUs.
Replacing pam_krb5 with SSSD for smart card and FAS authentication
Previously, to use smart card or Federated Authentication Service (FAS) authentication on RHEL 8 and Rocky Linux 8, you had to build the pam_krb5 module manually. Starting with this release, performing this manual step is no longer necessary for RHEL 8 and Rocky Linux 8 machines delivered in VDI mode. For more information, see Federated Authentication Service and Smart cards.
Extending easy install GUI to include MCS configuration
Previously, you could configure MCS variables only by editing the /etc/xdl/mcs/mcs.conf file. This release extends the easy install GUI to include MCS configuration so that you can also configure MCS variables by using the GUI. After you click Deploy on the GUI, the variables you set on the GUI override the variables you set in the /etc/xdl/mcs/mcs.conf file. For more information, see Step 3: Prepare a master image.
Support for recording Linux sessions (experimental)
As an experimental feature, you can now record and replay sessions hosted on a Linux VDA. For more information, see Session recording (experimental).
Database options now available (experimental)
As an experimental feature, you can now use SQLite in addition to PostgreSQL. You can also switch between SQLite and PostgreSQL by editing /etc/xdl/db.conf after installing the Linux VDA package. To do so, complete the following steps:
- Run
/opt/Citrix/VDA/sbin/ctxcleanup.sh. Omit this step if it is a fresh installation. - Edit
/etc/xdl/db.confto specify a database to use. - Run any of the following scripts based on your installation method:
/opt/Citrix/VDA/sbin/ctxinstall.shor/opt/Citrix/VDA/bin/easyinstallif you are using east install/opt/Citrix/VDA/sbin/ctxsetup.shif you are installing the Linux VDA manually/opt/Citrix/VDA/sbin/deploymcs.shif you are using MCS to create Linux VDAs
NOTE:
- We recommend you use SQLite for VDI mode only.
- For manual installations, you must install SQLite and PostgreSQL manually before being able to switch between them. For easy install and MCS, you can switch between SQLite and PostgreSQL without having to install them manually.
- You can also use
/etc/xdl/db.confto configure the port number for PostgreSQL.
Citrix Federated Authentication Service 2212
This release of Federated Authentication Service includes no new features.
For information about bug fixes, see Fixed issues.
Citrix Provisioning 2212
This release of Citrix Provisioning includes the enhancements described in the following sections. It includes several fixes for issues seen in past releases, and issues that we have identified.
IMPORTANT:
Use the most recent version of the Citrix License Server to receive the latest provisioning features.
When upgrading Citrix Provisioning to the newest version, the latest License Server version is required. If you do not upgrade to the latest version of the License Server, the product license enters the 30-day grace period.
For more information, see Licensing.
Support for accelerated network in an Azure target device
Citrix Provisioning now supports accelerated network in an Azure target device. When you enable accelerated networking in target devices, it lowers network latency, reduces jitter, and decreases CPU utilization. For more information see, What is Accelerated Networking?
Ability to select targets and reconnect
Using the Citrix Provisioning console, you can now select targets and reconnect them.
Support for Windows 11 22H2
Citrix Provisioning 2209 and later supports Windows 11 up to and including 22H2 on Azure, Hyper-V (SCVMM), and VMware.
For more information, see System requirements and compatibility.
Support for ESX 8.0
Citrix Provisioning 2209 and later supports ESX 8.0.
For more information, see System requirements and compatibility.
Use a hostname to specify a Citrix Provisioning server
While using Citrix Provisioning console to specify a Citrix Provisioning server, use a hostname instead of a numeric IP address. This implementation ensures that the insecure Windows NT LAN Manager (NTLM) protocol is not used and might be disabled on your network. If you want to use a numeric IP address, then you must configure the DNS reverse lookup zones to translate the IP address to a hostname.
Citrix Profile Management 2212
This release includes the following new features and enhancements. It also addresses several issues that help to improve overall performance and stability.
Ability to access file-based user stores using credentials
Previously, impersonating the current user was the only solution to access file-based user stores. With the Enable credential-based access to user stores policy, you can now enable Profile Management to access file-based user stores using the stores’ own credentials. This feature gives you more flexibility in deploying and accessing file-based user stores. For more information, see Enable credential-based access to user stores.
Citrix Workspace Environment Management 2212
This release includes the following new features and addresses issues to improve the user experience:
Apply settings to unbound agents
Starting with this release, you can apply settings to agents that are not bound to any configuration set. This feature lets you control how unbound agents behave. For more information, see Active Directory Objects.
Agents to download configuration data only when needed
Previously, WEM agents periodically connected to the WEM infrastructure service to download configuration data whether or not there was a configuration change. Agents now periodically check with the service to see if any configuration changes were made:
- If yes, agents download the configuration data.
- If no, the configuration data is not downloaded.
This enhancement significantly reduces network usage, especially if you have a large deployment with many agents.
Profile Management
Workspace Environment Management now supports all versions of Profile Management through 2212. The following tab is now available in Administration Console > Policies and Profiles > Citrix Profile Management Settings.
- File Deduplication. If enabled, Profile Management removes duplicate files from the user store and stores one copy of them in a central location. Doing so reduces the load on the user store by avoiding file duplication, thus reducing your storage cost.
For more information, see Citrix Profile Management Settings.
Change to Google Analytics configuration
Starting with this release, Workspace Environment Management determines which option of the following two to select based on the region of the machine hosting the infrastructure service:
- Help improve Workspace Environment Management using Google Analytics. This option is selected if the machine resides in non-European regions.
- Do not help improve Workspace Environment Management using Google Analytics. This option is selected if the machine resides in European regions.
This behavior applies only to fresh installations. For more information, see Configure the infrastructure service.
Citrix Session Recording 2212
This release includes the following new features and addresses issues to improve the user experience:
Lossy video codec
Lossy video codec lets you adjust compression options to reduce the size of recording files and to accelerate navigating recorded sessions during playback. Lossy video codec is suitable for use when:
- the size of recording files per time unit is too large, or
- there is a lag while you fast forward or rewind during playback.
For more information, see Enable or disable lossy video codec.
Playback justification logging
This release introduces playback justification logging and creates a Playback Loggingpage to aggregate all playback logs. With playback justification logging enabled, each time a user plays a recording, a dialog box appears, asking the user to enter a justification for playback. For more information, see Playback logging.
What’s new in earlier releases
For new features included in the releases that shipped after the 1912 LTSR through the 2210 CR, see What’s new history.
Citrix Virtual Apps and Desktops service
December 2022
New and enhanced features
Support for creating Azure AD joined, Hybrid Azure AD joined, and Microsoft Intune enabled catalogs with Azure AD joined master VMs. You can now create Azure AD joined, Hybrid Azure AD joined, and Microsoft Intune enabled catalogs with Azure AD joined, Hybrid Azure AD joined, and non-domain-joined master VMs. If you want to manage a master VM by Microsoft Intune, use VDA version 2212 or later, and do not skip image preparation while creating or updating machine catalogs.
For more information on machine identities, see Azure Active Directory joined, Microsoft Intune, and Hybrid Azure Active Directory joined.
Support in MCS for deleting VM objects without accessing the hypervisor. You can now delete VM objects in MCS without having access to the hypervisor. When deleting a VM or provisioning scheme, MCS needs to remove tags so that the resources are no longer tracked or identified. Previously, if the hypervisor could not be accessed, the tag removal failures were ignored. With this feature, if the hypervisor is not accessible while using the Remove-ProvVM command the tag removal will fail, but by using the PurgeDBOnlyoption, you can still delete the VM resource object from the database. For more information, see Delete machines without hypervisor access.
November 2022
New and enhanced features
Support for delivering MSIX and MSIX app attach apps. In Full Configuration > App Packages, you can now upload MSIX and MSIX app attach packaged apps to Citrix Cloud, and deliver them to your users. For more information, see App packages.
NOTE:
This feature is being rolled out in phases. It might not yet be activated for your account.
Prompt for unsupported VDA versions and functional levels. The Full Configuration interface now alerts you about unsupported VDA versions and functional levels. To avoid potential issues:
- If a machine runs an unsupported VDA version, you are prompted to upgrade to a supported version.
- If the functional level of a catalog or delivery group is not supported, you are prompted to set it to a higher level.
TIP:
VDAs are covered by the CR and LTSR lifecycles of Citrix Virtual Apps and Desktops.
Ability to annotate master images extended to catalog creation. When creating an MCS catalog in Full Configuration, you can now annotate its master image. For more information, see Master image.
Support for exporting desktop assignment data through Full Configuration. When viewing desktop assignments for a single-session OS delivery group, you can now export the assignment data into a CSV file for auditing purposes. To do so, select such a delivery group in Full Configuration > Delivery Groups, go to the Desktops tab, and then click Export in the upper-left corner on the tab.
All Applications and Application Folders tabs consolidated into one. In Full Configuration > Applications, the All Applications and Application Folders tabs have been consolidated into one tab, Applications. This change unifies the user experience of folder view management across Full Configuration nodes.
Support for changing the storage type to a lower tier when a VM is shut down in Azure environments. In Azure environments, you can now save storage costs by switching the storage type of a managed disk to a lower tier when you shut down a VM. To do this, use the StorageTypeAtShutdown custom property. The storage type of the disk changes to a lower tier (as specified in the StorageTypeAtShutdown custom property) when you shut down the VM. After you power on the VM, the storage type changes back to the original storage type (as specified in StorageType or WBCDiskStorageType custom property). For more information, see Change the storage type to a lower tier when a VM is shut down.
Updates in Filters View. The Filters page in Monitor is updated to include separate Saved and Default filters lists for better visualization and accessibility to the filters. You can select a view from among Machines, sessions, Connections, or Application Instances. Then, you can select a filter from the list of Saved filters or Default filters to view the filtered list of data. You can use the drop-down lists to refine the filter criteria or edit existing criteria. You can save your filter in the Saved Filter list. For more information, see the Filters article.
Ability to reset the OS disk of a persistent VM in an MCS created machine catalog. In VMware virtualization environments, you can now use the PowerShell command Reset-ProvVMDisk to reset the OS disk of a persistent VM in an MCS created machine catalog. The feature automates the process of resetting the OS disk. For example, it helps in resetting the VM to its initial status of a persistent development desktop catalog created using MCS.
For more information on using PowerShell command to reset the OS disk, see Reset OS disk.
Support for updating machine profile and additional custom properties of MCS provisioned machines in Azure environments. Previously, in Azure environments, you could use Request-ProvVMUpdate to update ServiceOffering custom property of an MCS provisioned machine. Now, you can also update the machine profile and the following custom properties:
StorageTypeWBCDiskStorageTypeIdentityDiskStorageTypeLicenseTypeDedicatedHostGroupIdPersistWBCPersistOsDiskPersistVm
For more information, see Update provisioned machines to current provisioning scheme state.
Support for machine profile in GCP. When you create a catalog to provision machines using Machine Creation Services (MCS) in Google Cloud Platform (GCP) environments, you can now use a machine profile to capture the hardware properties from a virtual machine and apply them to the newly provisioned VMs in the catalog. When MachineProfile parameter is not used, the hardware properties are captured from the master image VM or snapshot.
Machine profiles work with both Linux and Windows operating systems.
For information on how to create a machine catalog with a machine profile, see Create a machine catalog using a machine profile.
Support for updating MCS provisioned machines in GCP environments. In GCP environments, Set-ProvScheme changes the template (provisioning scheme) and does not affect existing machines. Using the PowerShell command Request-ProvVMUpdate, you can now apply the current provisioning scheme to an existing machine (or set of machines). Currently, in GCP, the property update supported by this feature is machine profile. For more information, see Update provisioned machines using PowerShell.
October 2022
New and enhanced features
Support for using machine profiles and host groups at the same time. When creating a catalog using an Azure Resource Manager master image, you can now use a machine profile and a host group at the same time. This is useful in scenarios where you want to use trusted launch for improved security and at the same time run the machines on dedicated hosts. For more information, see Microsoft Azure Resource Manager virtualization environments.
Support for organizing delivery groups using folders. You can now create a folder tree to organize delivery groups for easy access. For more information, see Organize delivery groups using folders.
Support for scheduling a one-time restart for machines through Full Configuration. A new option, Once, is now available when you create restart schedules for delivery groups. With this option, you can schedule machines in a delivery group to restart once, at a specified date and time. For more information, see Create a restart schedule.
Advanced Probe Scheduling. Improved scheduling of Application and Desktop Probes can now be done from Monitor. Using this feature, Citrix Probe Agent can be configured to run the probe tasks on specific days of the week and repeated at specified intervals during the day. This allows you to schedule a single probe task to repeat at specific times of the day and the week. You can now proactively check your site health with probes set to run regularly at suitable times. This feature simplifies probe setup and management in Monitor. For more information, see Application Probing and Desktop Probing.
Citrix Virtual Apps and Desktops Standard for Azure
Citrix Cloud Healthcheck
Cloud Health Check allows you to run checks that gauge the health and availability of the site and its components. You can run health checks for Virtual Delivery Agents (VDAs), StoreFront servers, and Profile Management. VDA health checks identify possible causes for common VDA registration, session launch, and time zone redirection issues.
If issues are present during the checks, Cloud Health Check provides a detailed report and the actions to fix the issues. Each time Cloud Health Check starts, it checks for the latest version of scripts on the Content Delivery Network (CDN) and automatically downloads the scripts if they do not exist on the local machine. Cloud Health Check always chooses the latest local version of scripts to run health checks.
Citrix Workspace App 2212 for Windows
What’s new in 2212
NOTE:
From this release onward, ensure that Microsoft Edge WebView2 Runtime version is 102 or later. For more information, see System requirements and compatibility.
Client App Management
Citrix Workspace app 2212 for Windows now offers Client App Management capability that makes the Citrix Workspace app a single client app required on the end point to install and manage agents such as Secure Access Agent and End Point Analysis (EPA) plug-in.
With this capability, administrators can easily deploy and manage required agents from a single management console.
NOTE:
This feature is applicable to Workspace (cloud) sessions only.
For more information, see Client App Management.
Client App Management for Zoom plug-in [Technical Preview]
Starting from Citrix Workspace app 2212 for Windows, you can now manage Zoom plug-in using Client App Management capability.
NOTE:
This feature is applicable to Workspace (cloud) sessions only.
For more information, see Client App Management.
You can record your feedback for this technical preview by using this Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Auto-update version control
Administrators can now manage the auto-update version for the devices in the organization.
Administrators can control the version by setting the version in the maximumAllowedVersion property in the Global App Config Service.
Example JSON file in Global App Config Service:
Copy
"AutoUpdate": {
"userOverride": false,
"AutoUpdatePluginsSettings": [
{
"pluginSettings":
{ "upgradeToLatest": false,
"maximumAllowedVersion": "22.9.0.3934", }
,
"pluginName": "WorkspaceApp",
"pluginId": "1CDF566D-B2C7-47F-6283C862E1D6"
}
When the version is set, Citrix Workspace app on the user’s device is automatically updated to the version specified in the maximumAllowedVersion property.
NOTES:
- To achieve auto-update version control, upgradeToLatest setting in the Global App Config Service must be set to false. If this is true, maximumAllowedVersion will be ignored.
- Do not modify the pluginId as this is mapped to Citrix Workspace app.
- If the administrator hasn’t configured the version in the Global App Config Service, Citrix Workspace app is updated to the latest available version by default.
Force login prompt for Federated identity provider
Citrix Workspace app now honors Federated Identity Provider Sessions setting. For more information, see Citrix Knowledge Center article CTX253779.
You no longer need to use Store authentication tokens policy to force the login prompt.
Improved reconnect experience after connection lease file expiry
Previously, there was no notification to the end user when the connection lease file and authentication token expired.
Starting from this release, you will be prompted with an error message and a consent dialog box. The consent dialog box appears only when you have resources running in the session. If there are no resources running, only error dialog box appears. You will be signed out without being prompted with the consent dialog box.
You can click Sign Out to sign out from the current Citrix Workspace app session or click Cancel to continue with the session.
NOTE:
Save your data before clicking Sign Out.
Enhancement to App Protection: Anti-DLL Injection [Technical Preview]
As part of App Protection, we now have a security enhancement that helps protect the Citrix Workspace app from certain unauthorized dynamic-link libraries (DLL) or untrusted modules. If such untrusted modules are injected, the Citrix Workspace app detects these interventions and stops the modules from loading.
Previously, this technical preview feature was applicable only for protected virtual apps and desktops. With this release, we have enhanced its scope to now include:
- all virtual apps and desktop sessions
- the Citrix Workspace app authentication window (on-premises deployment/StoreFront)
Additionally, this enhancement now:
- exits the session immediately when certain untrusted or malicious DLLs already exist on the protected component
- displays a notification when an untrusted or malicious DLL is blocked.
Disclaimer:
This capability works by filtering access to required functions of the underlying operating system (specific API calls required to load DLLs). Doing so means that it can provide protection even against certain custom and purpose-built hacker tools. However, as operating systems evolve, new ways of loading DLLs can emerge. While we continue to identify and address them, we cannot guarantee full protection in specific configurations and deployments.
You can register for this technical preview by using this Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Support for default installation of App Protection
App Protection component is now installed by default during the Citrix Workspace app installation.
The Enable app protection check box that appears during the installation is replaced with Start App Protection after installation.
When you select this check box, App Protection starts immediately after the installation.
NOTE:
If you do not enable this check box, App Protection automatically starts upon the first start of a protected resource or component for customers who have entitled to App Protection.
You can also start the App Protection component using the /startappprotectioncommand line parameter. However, the previous /includeappprotection switch is deprecated.
NOTE:
Previously, anti-screen capture and anti-keylogging capabilities were enforced by default for Citrix authentication and Citrix Workspace app screens. However, starting from 2212, these capabilities are disabled by default and need to be configured using the Group Policy Object. For information on the GPO configuration, see Enhancement to App Protection configuration.
App Protection enhancement: Screen capture detection and notification
Starting from this release, you can view a notification when a possible attempt of screen capture is made on any protected resources. For information on the resources protected by App Protection, see What does App Protection protect?.
The notification appears when there is an:
- attempt to take a screenshot or record video through a screen-capturing tool.
- attempt to take a screenshot through the Print Screen key.
NOTE:
The notification appears only once per running instance of the screen capture tool. The notification appears again if you relaunch the tool and attempt screen capture.
Desktop Viewer optimization
This release optimizes the Desktop Viewer experience by reducing the launch time by 5 seconds. The Desktop Viewer toolbar opens quickly and might display the default Windows session sign-in screen. Administrators can hide this experience by configuring the following registry to introduce some delay in milliseconds:
- Location: HKEY_CURRENT_USER\SOFTWARE\Citrix\XenDesktop\DesktopViewer
- Name: ExtendConnectScreenMS
- Type: DWORD
- Value: 00000000 (Delay in Milliseconds)
NOTE:
The registry configuration is optional.
Citrix Enterprise Browser
NOTE:
From Citrix Workspace app for Windows version 2210, Open all web and SaaS apps through the Citrix Enterprise Browser feature is disabled.
This release includes Citrix Enterprise Browser version 107.1.1.13, based on Chromium version 107.
- Set Citrix Enterprise Browser as the work browserYou can now configure Citrix Enterprise Browser as a work browser to open all work links. You can select an alternate browser to open non-work links.A work link is a link that is associated with the web or SaaS apps that are configured by the administrator for the end user. When a user clicks any link within a native application, if it’s a work link, it’s opened through the Enterprise Browser. If not, it’s opened through the alternate browser that the end-user selects.For more information, see Set Citrix Enterprise Browser as the work browser.
Citrix Workspace App 2212 for iOS
Siri shortcuts using App Intent API
Previously, Siri integration required manual intervention where the user had to configure Siri and Siri shortcuts using the option in the Settings menu. However, with the integration of new App Intent API, Citrix Workspace users can now invoke apps or desktops without any additional setup. Users can start virtual apps or desktops by issuing simple voice commands to Siri, for example:
- “Hey, Siri. Launch application or desktop in Workspace”.
- Say the name of the app or desktop that you want to open when prompted by Siri.
NOTE:
You can also invoke the shortcuts from the Shortcuts app or Spotlight search on your device.
Multitasking capabilities using Stage Manager
Citrix Workspace app for iOS now enables you to take advantage of Apple’s Stage Manager feature on iPad devices.
You can now open Citrix Workspace app in Window mode and run multiple application windows on iPad simultaneously when Stage Manager is enabled. This also allows you to resize the window and thereby change the session resolution.
NOTE:
Extending display to an external monitor from within Citrix Workspace app is supported only when the app is in full screen.
Support for Apple’s native non-mirror mode [Technical Preview]
You can now extend the display using Apple’s non-mirror mode available with iPad OS 16.2. You can multi-task by running the Citrix Workspace app, virtual apps, and virtual desktops on the external monitor and leaving the iPad screen free to run other native apps.
NOTE:
Support for Apple’s non-mirror mode extend display is available on selected iPad models only. For more information, see Apple documentation.
If you don’t want to use ths technical preview feature, you can always use Citrix Workspace app in full-screen mode.
Known issues:
- Citrix Workspace app UI appears abnormally on the external monitor when the session disconnects.
- If the session is running in full screen mode on the external monitor, the device pointer locks at a random place when you move the session to the iPad screen. You will not be able to use the mouse connected to the session. As a workaround, resize the session to window mode on the iPad screen and move the device pointer into session. This allows you to use the mouse in both window and full screen mode.
These issues occur when the Stage Manager and Non-Mirror Mode are On.
Changes to iOS version
Starting from Citrix Workspace app for iOS version 2212, iOS version 13 and earlier versions are no longer supported.
Citrix Workspace App 2212 for Linux
Support for 32-bit cursor [Technical Preview]
Earlier, when you were using the custom 32-bit cursor, a black box might appear around the cursor. With this release, Citrix Workspace app for Linux supports 32-bit cursor. As a result, the black box around the cursor issue is resolved.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Addition of client-side jitter buffer mechanism [Technical Preview]
This feature ensures smooth audio even when the network latency fluctuates. By default, this feature is disabled.
To enable this feature, do the following:
- Navigate to the
/opt/Citrix/ICAClient/config/module.iniconfiguration file and edit it. - Disable audio latency control as follows:
`AudioLatencyControlEnabled = FALSE` - Enable jitter buffer as follows:
`JitterBufferEnabled = TRUE`
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Support for multiple audio devices
Starting with this release, Citrix Workspace app displays all available local audio devices in a session with their names. In addition, plug-and-play is also supported.
Multiple audio devices redirection feature is enabled by default. To disable this feature, set the value for AudioRedirectionV4 to False in the module.ini file.
Support for audio recording
Starting with this release, audio recording feature is enabled by default. The devices to record audio appears when a session starts.
To disable this feature, set the value for AllowAudioInput to False in the wfclient.ini file.
Background blurring and replacement for Citrix Optimized Teams [Technical Preview]
Prerequisite:
Ensure that you have installed wget.
Citrix Optimized Teams in Citrix Workspace app for Linux now supports background blurring and background replacement. You can use this feature by selecting More > Apply Background Effects when you are in a meeting or in a P2P call.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.
Citrix Workspace App 2212 for Android
Inactivity timeout for Citrix Workspace app sessions
Administrators can specify the amount of idle time that is allowed. After the time-out value, an authentication prompt appears. The inactivity timeout value can be set starting from 1 minute to 24 hours. By default, the inactivity timeout isn’t configured. Administrators can configure the inactivityTimeoutInMinutesMobile property by using a PowerShell module. Click here to download the PowerShell modules for Citrix Workspace app configuration.
When you’ve reached the specified time-out value, the end-user experience is as follows depending on the authentication type configured:
- After the inactivity timeout, you’ll receive a prompt to provide biometric authentication to access the Citrix Workspace app again.
- If you can cancel the biometric authentication prompt, the following message appears: Citrix Workspace app is locked. You must authenticate to continue to use the Workspace app.
- If the passcode isn’t configured on Android, you have to sign in with credentials after the inactivity timeout.
DPI Matching [Technical Preview]
The DPI matching feature ensures that the DPI scaling setting present in a remote desktop matches your device’s DPI setting. In general, the display clarity depends not only on resolution but also on the density of the pixels (DPI).
Previously, the sessions were rendered by resolution settings and those sessions weren’t clear even on high-DPI mobile phones or tablets.
Starting with the 2212 release, a new UI is introduced to achieve DPI matching. On your device, go to Citrix Workspace app for Android Settings > General > Display > Session Resolution > and select the Match client DPI option.
You can now connect an Android phone, or an Android tablet to an external monitor, or a TV and the session display scales according to the optimal DPI settings. You can use the Samsung DeX mode too. In other words, the Citrix Workspace app attempts to match the display resolution and DPI scale settings of the Android device to the Citrix session automatically.
This feature enhances the user experience by rendering the sessions according to the DPI of the phone or tablet. The session icons, text, and image clarity are now sharper and more comfortable to read. By default, the DPI matching feature is disabled.
NOTE:
- This feature is a request-only preview. To get it enabled in your environment, fill out the Podio form.
Citrix Workspace App 2301 for Apple OSX
Background blurring and replacement for Citrix Optimized Teams
Citrix Optimized Teams in Citrix Workspace app for Mac now supports background blurring and background replacement. You can use this by selecting More > Apply Background Effects when you are in a meeting or a P2P call.
Auto-update version control [Technical Preview]
Administrators can now manage the auto-updated version of Citrix Workspace app for the devices in the organization. Administrators can control the version by setting the range in the maximumAllowedVersion and minimumAllowedVersion properties in the Global App Config Service.
Example JSON file in Global App Config Service:
Copy
{
“category”: “AutoUpdate”,
“userOverride”: false,
“assignedTo”: [
“AllUsersNoAuthentication”
],
“settings”: [
{
“name”: “Auto update plugins settings”,
“value”: [
{
“pluginName”: “Citrix Workspace”,
“pluginId”: “D99C3E77-FBF5-4B97-8EDA-4E381A1E0826”,
“pluginSettings”: {
“deploymentMode”: “Update”,
“upgradeToLatest”: false,
“minimumAllowedVersion”: “22.12.0.21”,
“maximumAllowedVersion”: “22.12.0.21”,
“delayGroup”: “Medium”,
“stream”: “”,
“ftu”: false,
“blocking”: false,
“detectRule”: “”
}
}
]
}
]
}
When the range is set, Citrix Workspace app on the user’s device is automatically updated to the highest available version that falls between the mentioned range.
If you want to auto-update Citrix Workspace app to a specific version, enter the same version in the maximumAllowedVersion and minimumAllowedVersion properties in the Global App Config Service.
NOTE:
- To achieve auto-update version control, upgradeToLatest setting in the Global App Config Service must be set to false. If this is true, maximumAllowedVersion and minimumAllowedVersion will be ignored.
- Do not modify the pluginId as this is mapped to Citrix Workspace app.
- If the administrator hasn’t configured the version in the Global App Config Service, Citrix Workspace app is updated to the latest available version by default.
- You can only use the version ranges that are set to update Citrix Workspace app. However, downgrade is not supported.
- This feature is supported from release 2301 onwards.
You can provide feedback for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.
Improved auto-update experience [Technical Preview]
The automatic update feature automatically updates the Citrix Workspace app to the latest version, without any user intervention. Citrix Workspace app periodically checks for any latest updates and downloads the latest available version of the app. By default, automatic updates are enabled, unless it is explicitly disabled by your admin.
Installation starts when the Citrix Workspace app or the sessions are idle.
NOTE:
Citrix Workspace app cannot be accessed during the installation.
When you start the Citrix Workspace app, a notification appears to indicate the status of the installation.
You can disable the auto-update feature by navigating to Preferences > Advanced > Updates and unselecting the Automatically keep Workspace app up to date option.
You can provide feedback for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.
Client App Management [Technical Preview]
Starting with 2301 release, administrators can manage auto-update of EPA Clients for macOS through the Citrix Workspace app and single sign-on to Citrix Secure Access if you have already signed in to Citrix Workspace app.
Auto-update of Endpoint Analysis (EPA)
You can now manage auto-update of EPA Clients for macOS through the Citrix Workspace app. Administrators must specify the agents required on end users’ devices in the Global App Configuration Service. If the agent is already installed and a new version of the agent is available, then the Citrix Workspace app updates the agent to the next higher version. Citrix Workspace app ensures to automatically update the agents whenever a new update is available in the future.
Example JSON file in Global App Config Service:
Copy
{
“category”: “AutoUpdate”,
“userOverride”: false,
“assignedTo”: [
“AllUsersNoAuthentication”
],
“settings”: [
{
“name”: “Auto update plugins settings”,
“value”: [
{
“pluginName”: “Citrix EPA”,
“pluginId”: “7303CB73-42EE-42BB-A908-9E6575912106”,
“pluginSettings”: {
“deploymentMode”: “Update”,
“upgradeToLatest”: false,
“minimumAllowedVersion”: “1.0”,
“maximumAllowedVersion”: “5.0”,
“delayGroup”: “Medium”,
“stream”: “”,
“ftu”: false,
“blocking”: false,
“detectRule”: “”
}
}
]
}
]
}
The meaning of the properties and their possible values for the deploymentMode key are as follows:
- “InstallAndUpdate”: Plugin can be freshly installed and can updated with new version.
- “Update”: Only update should be allowed, no fresh install.
- “None”: No action needed for this plugin.
Single sign-on to Citrix Secure Access using Citrix Workspace app
Starting with 2301 release, you can single sign-on to Citrix Secure Access if you have already signed in to Citrix Workspace app. When you sign in to Citrix Workspace app and open Citrix Secure Access, you will not be asked to authenticate by entering the credentials. It automatically proceeds with the authentication. This feature provides users with a seamless experience by allowing single sign-on to different Citrix applications. This feature is available only for customers on cloud stores. Along with the latest version of Citrix Workspace app, you must have a compatible version of Citrix Secure Access (22.12.2 and later versions).
You can provide feedback for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.
Enhanced notch screen support
Starting with 2301 release, Citrix Workspace app for Mac supports Macs with a notch display. Macs support native notch screen in full screen mode for retina and multi-monitor displays. The area of the session in notch screen is now much bigger and provides the customers with more screen space. This enhancement also supports high DPI scaling. The mouse position also appears accurate in all the external monitors connected.
NOTE:
Ensure not to select the Scale to fit below built-in camera option in the Citrix Viewer. This option is not selected by default and can be found only on Macs with notch display.
App Protection enhancement
Starting with 2301 release, App Protection is enhanced to protect the Citrix Workspace app. This enhancement includes protecting the authentication screen and the screen that you see after signing into the Workspace app. For more information, see App Protection enhancement.
Improved virtual apps and desktops launch experience [Technical Preview]
Starting with 2301 release, the opening of Citrix resources has been enhanced to be more intuitive, informative, and user friendly.
The launch progress notification now appears at the bottom-right corner of your screen. A progress status of the resources, which are in the process of being opened is shown. You cannot retrieve the notification once you dismiss it. The notification stays for a few seconds from the time you start the session. If the session fails to start, then the notification shows the failure message.
NOTE:
This feature is available for both Workspace (cloud) and storefront sessions.
You can provide feedback for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.
Global App Configuration Service channel support [Technical Preview]
The Global App Configuration Service for Citrix Workspace allows a Citrix administrator to deliver Workspace service URLs and Workspace App settings through a centrally managed service. For more information, see Global App Configuration Servicedocumentation.
Administrators can now use the Global App Config Service to define settings, which are applicable to specific user-groups. This ensures that some features or functionalities can be made available to only certain users as required, and not to others.
You can provide feedback for this technical preview by using the Podio form.
NOTE:
Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.
Enhanced menu bar support
Starting with 2301 release, the CWA fully supports the Automatically hide and show the menu bar in full screen option in MacOS. For versions earlier than macOS 13, you must navigate to System Preferences > Dock & Menu Bar and uncheck the Automatically hide and show the menu bar in full screen option. For macOS 13 and later versions, you must navigate to System Preferences > Desktop & Dock and uncheck the Automatically hide and show the menu bar in full screen option. You have the provision to either enable or disable this option. This enhancement also supports high DPI scaling. The mouse position also appears accurate in all the external monitors connected.
The figure below illustrates a window where the menu bar is hidden
The figure below illustrates a window where the menu bar appears
Citrix Enterprise Browser
This release includes Citrix Enterprise Browser version 107.1.1.13, based on Chromium version 107. For more information about the Citrix Enterprise Browser, see the Citrix Enterprise Browser documentation.
Set Citrix Enterprise Browser as the work browser
You can now configure Citrix Enterprise Browser as a work browser to open all work links. You can select an alternate browser to open non-work links.
A work link is a link that is associated with the web or SaaS apps that are configured by the administrator for the end user. When a user clicks any link within a native application, if it’s a work link, it’s opened through the Enterprise Browser. If not, it’s opened through the alternate browser that the end-user selects.
For more information, see Set Citrix Enterprise Browser as the work browser.
Citrix Workspace App 2212 for HTML5
Client Drive Mapping [Technical Preview]
Previously, copying files from your local machine to the virtual environment required you to upload the file to the virtual session and download the files from the virtual session. You weren’t able to access local drives directly from the File Explorer in a session.
Starting with this release, the early version of the client drive mapping (CDM) feature supports folder mapping on the local machine, making it accessible from within a session. You can map any folder from the local machine, provided the folder doesn’t contain system files. After you map the folder, it appears as an L: drive inside the sessions.
The end user can do the following operations:
- Copy files and folders from the local machine to the mapped drive in the session.
- View the list of files and folders in the mapped L: drive.
- Open and read the file contents in the mapped L: drive.
- View the file properties in the mapped L: drive. For example, modified time and file size only.
This feature provides the advantage of accessing both virtual desktop drives and local machine drives together in the file explorer within the HDX session. This feature is supported on Google Chrome and Microsoft Edge Chromium browsers only. By default, this feature is disabled.
Citrix Workspace App 2212 for Chrome OS
Client Drive Mapping [Technical Preview]
Previously, copying files from your local machine to the virtual environment required you to upload the file to the virtual session and download the files from the virtual session. You weren’t able to access local drives directly from the File Explorer in a session.
Starting with this release, the early version of the client drive mapping (CDM) feature supports folder mapping on the local machine, making it accessible from within a session. You can map any folder from the local machine, provided the folder doesn’t contain system files. After you map the folder, it appears as an L: drive inside the sessions.
The end user can do the following operations:
- Copy files and folders from the local machine to the mapped drive in the session.
- View the list of files and folders in the mapped L: drive.
- Open and read the file contents in the mapped L: drive.
- View the file properties in the mapped L: drive. For example, modified time and file size only.
This feature provides the advantage of accessing both virtual desktop drives and local machine drives together in the file explorer within the HDX session. This feature is supported on Google Chrome and Microsoft Edge Chromium browsers only. By default, this feature is disabled.
