Citrix Endpoint Management

Citrix Launcher

Citrix Launcher lets you customize the user experience for Android Enterprise devices and legacy Android devices deployed by Endpoint Management. With Citrix Launcher, you can prevent users from accessing certain device settings and restrict devices to one app or a small set of apps.

The minimum Android version supported for Secure Hub management of Citrix Launcher is Android 6.0.

Use a Launcher Configuration Policy to control these Citrix Launcher features:

  • Manage Android Enterprise devices and legacy Android devices so that users can access only the apps that you specify.
  • Optionally specify a custom logo image for the Citrix Launcher icon and a custom background image for Citrix Launcher.
  • Specify a password that users must type to exit the launcher.

Citrix Launcher isn’t intended to be an extra layer of security over what the device platform already provides.

Set up Citrix Launcher for Android Enterprise devices

  1. Add the Citrix Launcher app (com.citrix.launcher.droid) to Endpoint Management as a public store app. In Configure > Apps, click Add, and then click Public App Store. For more information, see Add a public app store app.

    Add the Citrix Launcher app

  2. In the Kiosk device policy, specify which apps must be available on company-owned devices for dedicated use (also known as Android corporate owned single use (COSU) devices). Go to Configure > Device Policies, click Add, and select Kiosk. Then select the Citrix Launcher app and any additional apps in the allow list. If you previously added apps to the list, you don’t need to upload the apps again. For more information, see Android Enterprise settings.

  3. Add the Launcher Configuration device policy. Go to Configure > Device Policies, click Add, and select Launcher Configuration. In the Launcher Configuration policy, add any of the apps that you specified in the Kiosk policy. You don’t need to add all of the apps you specified in the Kiosk policy. You must add the Citrix Launcher app only in the Kiosk policy. For more information, see Launcher Configuration Policy.

  4. Create a delivery group and deploy resources. For more information, see the Add a delivery group and deploy resources section in this article.

After you deploy Citrix Launcher on company-owned Android Enterprise devices for dedicated use, Endpoint Management installs the app and replaces the default Secure Hub launcher. If you exit the Citrix Launcher app, Secure Hub becomes the default launcher again.

Set up Citrix Launcher for legacy Android devices

Note:

In August 2020, Citrix deprecated support for the CitrixLauncher.apk for legacy Android devices. You can continue using the legacy Citrix Launcher app (com.citrix.launcher) for Android devices without receiving the new feature updates.

  1. To locate the Citrix Launcher app, go to the Citrix Endpoint Management download page and search for Citrix Launcher. Download the latest file. The file is ready for upload into Endpoint Management and doesn’t require wrapping.

  2. Add the Launcher Configuration device policy. Go to Configure > Device Policies, click Add, and select Launcher Configuration. For more information, see Launcher Configuration Policy.

  3. Add the Citrix Launcher app to Endpoint Management as an enterprise app. In Configure > Apps, click Add and then click Enterprise. For more information, see Add an enterprise app.

  4. Create a delivery group and deploy resources. For more information, see the Add a delivery group and deploy resources section in this article.

Add a delivery group and deploy resources

  1. Create a delivery group for Citrix Launcher with the following configuration in Configure > Delivery groups.

    • On the Policies page, add a Launcher Configuration Policy.
    • On the Apps page, drag Citrix Launcher to Required Apps.
    • On the Summary page, click Deployment Order and ensure that the Citrix Launcher app precedes the Launcher Configuration policy.

    Launch deployment order

  2. Deploy resources to a delivery group by sending a push notification to all users in the delivery group. For more information about adding resources to a delivery group, see Deploy resources.

Manage devices without Citrix Launcher

Instead of using Citrix Launcher, you can use features that are already available.

To provision dedicated devices:

  1. Create an enrollment profile by setting the Device owner mode to Dedicated device. See Provisioning dedicated Android Enterprise devices and Enrollment profiles.

  2. Create a Kiosk device policy to add apps to the allow list and set lock task mode. If you previously added apps to the list, you don’t need to upload the apps again. For more information, see Android Enterprise settings.

  3. Enroll each device in the enrollment profile you created.