Workspace hub device management
Citrix Ready workspace hub devices let users move virtual app and desktop sessions from a mobile device running Citrix Workspace app to a Citrix Ready workspace hub. The Citrix Ready workspace hub is a Raspberry Pi device that has a keyboard, mouse, monitor, and any other accessory attached to it. You can manage Citrix Ready workspace hub devices from your Endpoint Management console. For more information about Citrix Ready workspace hub, see Citrix Ready workspace hub and this Citrix blog post.
By using Endpoint Management to manage Citrix Ready workspace hub, you can keep your devices updated with the latest features and security patches. You can also perform security actions, such as full wipes or restarts. For more details about the unified endpoint management (UEM) and data protection benefits of Endpoint Management, see this use case on the Citrix website.
A general workflow for the workspace hub device management is as follows:
Add Citrix Ready workspace hubs to the Device Whitelist table in the Endpoint Management Console, using either of the following methods:
The Endpoint Management console includes the terms “blacklist” and “whitelist”. We are changing those terms in an upcoming release to “block list” and “allow list”.
Set up security actions. See Security actions.
For supported operating systems, see Supported device operating systems.
To add Citrix Ready workspace hubs to Endpoint Management manually
To enroll a Citrix Ready workspace hub in Endpoint Management, you can manually add the device to the Device Whitelist table in the Endpoint Management console.
A workspace hub device must enroll from the same region where Citrix Endpoint Management is located. For example, if your home region is European Union, the device must enroll while in that region. After a workspace hub device enrolls from your home region and the device roams to a different geographical region, workspace hub works as usual.
If a workspace hub device has to enroll when outside of the home region, the Service URL will contain an incorrect home region. You can change the Service URL in the Stratodesk configuration to point to the correct home region, as follows.
- On the Stratodesk system: Go to Services > NoTouch Center > Central Management URL.
Change the Management URL to include the URL for your home region.
- Asia Pacific South (Asia, Australia/Pacific, Middle East):
- European Union:
- United States (Africa, Antarctica, Caribbean, Central America, North America, South America):
- Asia Pacific South (Asia, Australia/Pacific, Middle East):
- Save the configuration.
Go to Information > NoTouch Center and then click Announce.
For example, if your home region is in the U.S. and the Workspace hub device has to enroll while in the U.K.: Change the Service URL in Stratodesk from
The configuration steps in this section include specifying a domain for Citrix Ready workspace hub users. Workspace hub uses email-based management server lookup. The lookup requires that you create a DNS SRV record named
_tcmgr._tcp.mycompany.com, where mycompany.com is your domain name.
For more information, see the NComputing documentation article, E-mail based management server lookup.
To add a device to the Device Whitelist table
In the Endpoint Management console, navigate to Manage > Devices.
Click Device Whitelist at the top.
Click Add. On the page that opens, type the following information.
- Device platform: Select Workspace Hub.
- Device ID Type: Select the method to identify devices. Citrix Ready workspace hub only supports MAC address. For the device registration process, the eth0 MAC address is used, regardless of which connection type you choose.
- Device ID: Type the appropriate identifier you selected previously.
- Associated User: User to associate with the Citrix Ready workspace hub. The user associated with the device can be a pseudo user, such as a service account. The selected user is used for enrollment, policy pushing, and applying security actions. A single user can associate with multiple devices. This user can be a Local user or LDAP user already configured in your Endpoint Management console. If you want to associate the Citrix Ready workspace hub with a local user, choose Local from Select domain. Enter the user name in Search for user and select the user. If you want to associate the Citrix Ready workspace hub with an LDAP user, choose the appropriate domain from Select domain. Search for a user in Search for user and select the user.
- Select domain: Select the domain to use when searching for users.
- Search for user: Type the user name you want to associate with this device and click Search. Select the user from the result box. The user appears in the Associated User box.
Click Save. The device is added to the table.
To import or export Citrix Ready workspace hub devices in bulk
To enroll a Citrix Ready workspace hub in Endpoint Management, you can import or export the devices in bulk to the Device Whitelist table.
In the Endpoint Management console, navigate to Manage > Devices. Click Device Whitelist and then click Import.
Click Download to download a .csv template for importing devices. The columns in the file are the same as the fields in the previous workflow.
Fill out the form and save it. When finished, click Choose File and select the template.
Click Import. All Citrix Ready workspace hubs in the template file are added to the table.
To export the list of Citrix Ready workspace hubs for editing, click Export.
Configure a Citrix Ready workspace hub
After configuring Endpoint Management to enroll your Citrix Ready workspace hub devices, configure the workspace hub device itself. For more information on configuring the device, see the Stratodesk Knowledge Base.
For first-time device use, configure Central Management during the first time wizard. Enter
https://manageiot.xm.cloud.com:443/easyadmin/servlet/XmlRPC as the Management URL and then click Finish. The device performs an Announce and enrolls in Endpoint Management.
If the device was configured, or if you don’t want to use the wizard, navigate to Services > No Touch Center. Configure the Management URL as you did previously and Save. Do a manual Announce by navigating to Information on the left pane and clicking Announce.
Deploy custom configurations to Citrix Ready workspace hub devices
You can deploy custom configurations to Citrix Ready workspace hub devices. After manually configuring your first workspace hub device, you then download the configuration from the device and deploy the configuration to all other devices.
- Workspace hub device running Stratodesk NoTouch OS v2.40.3512 (minimum version)
To set up and deploy custom configurations:
Configure your Citrix Ready workspace hub device and download the configuration file.
Log in to the Workspace Hub console from a remote machine.
Set up network shares, printer configuration, and any other settings you want shared across devices on your Citrix Ready workspace hub device.
In the left pane of your workspace hub console, click Download config.
The .config file downloads to the remote machine where you’re logged in.
Host the configuration file on a file sharing web server. Ensure that the file share isn’t protected with any authentication.
On your Endpoint Management console, navigate to Configure > Device Policies and select Import Device Configuration.
Type a Policy Name and, optionally, a Description. Click Next.
Paste the URL for the configuration file and click Next.
Configure your deployment rules. For information on configuring those rules, see Device policies. Click Save.
Within a few minutes after the policy pushes to devices, enrolled devices show the configured settings. Those settings include network shares, desktop wallpapers, and connections.
If the device doesn’t reflect the configuration, check the configuration URL in your Citrix Ready workspace hub device console. Navigate to Services > NoTouch Center. Then confirm that the Configuration archive URL is the URL where you hosted the configuration file.
To manage Citrix Ready workspace hub devices
To view and manage Citrix Ready workspace hubs in Endpoint Management after enrollment, navigate to Manage > Devices. The Devices table appears. Select Workspace Hub on the left to see the newly enrolled device. Choose the Citrix Ready workspace hub you want to manage, and then click Edit to view and confirm the device details.
When you select the check box next to a device, the options menu appears above the device list. If you click anywhere else in the list, the options menu appears on the right side of the listing.
The General page lists device Identifiers for the platform type, such as the serial number, ActiveSync ID, and other information. For Device Ownership, select Corporate or BYOD.
The General page also lists device Security properties, such as Strong ID, Lock Device, Activation Lock Bypass, and other information for the platform type.
The remaining Device Details sections contain summary information for the device.
- Assigned Policies: Displays the number of assigned policies including the number of deployed, pending, and failed policies. Provides the policy name, type and last deployed information for each policy.
- Apps: Displays the apps that are installed, pending, or failed.
- Delivery Groups: Displays the number of successful, pending, and failed delivery groups. For each deployment, provides the delivery group name and deployment time.
You can also perform security actions, such as full wipe or restart. For more information on security actions, see Security actions.
Deploy the Citrix Workspace configuration to Citrix Ready workspace hub devices
Use the App Configuration device policy to deploy the Citrix Workspace configuration to Citrix Ready workspace hub devices. Go to Configure > Device Policies, add the App Configuration policy, and, under Platforms, select Workspace Hub. Configure the following Workspace Hub settings:
- Connection Mode: Select Citrix Receiver.
- Connection Name: Type a descriptive name for your connection.
- Connection Target: Type a URL to load upon connection.
Some apps might require extra parameters to function. For each configuration parameter you want to add, click Add and then do the following:
- Parameter name: Type the key name of an application setting for the Citrix Ready workspace hub device.
- Value: Type the value for the specified parameter.
After you complete the configuration, choose delivery groups. For more information, see Device policies.
Configure Citrix Ready workspace hub device policies
Use these policies to configure how Endpoint Management interacts with the workspace hub devices. This table lists all device policies available for Citrix Ready workspace hub devices.
|App Configuration||Credentials||Import Device Configuration|
|Control OS Update||WiFi|
Deploy and update apps for Citrix Ready workspace hub
Because Citrix Ready workspace hub devices only allow for deploying and updating a single file, first package all of your apps into a Squash FS file.
For more information on creating a Squash FS file, see the Squash FS documentation.
When creating the file, ensure that you output an .img file.
In the Endpoint Management console, navigate to Configure > Apps and click Add. Click Enterprise.
Type a name and description for your app, and then deselect all platforms except Workspace Hub. Click Next.
On the Workspace Hub Enterprise App page, click Upload. Navigate to the .img file you created previously and click Open.
Click Next. The Approvals page does not function for Citrix Ready workspace hub.
Click Next. The Delivery Group Assignment page appears.
Next to Choose delivery groups, type to find a delivery group or select a group or groups in the list. The groups you select appear in the Delivery groups to receive app assignment list.
Apps are always delivered to the device assigned to the delivery group. It doesn’t matter whether the app is optional or required because there is no store for Citrix Ready workspace hub devices.
After the apps upload to Endpoint Management, the workspace hub devices receive the update when restarted.
Workspace hub supports Full Wipe and Restart security actions. For a description of each security action, see Security actions.
Workspace hub device management
In this article
- To add Citrix Ready workspace hubs to Endpoint Management manually
- To import or export Citrix Ready workspace hub devices in bulk
- Configure a Citrix Ready workspace hub
- Deploy custom configurations to Citrix Ready workspace hub devices
- To manage Citrix Ready workspace hub devices
- Deploy the Citrix Workspace configuration to Citrix Ready workspace hub devices
- Configure Citrix Ready workspace hub device policies
- Deploy and update apps for Citrix Ready workspace hub
- Security actions