Citrix Endpoint Management

Enterprise Hub device policy

An Enterprise Hub device policy for Windows Phone lets you distribute apps through the Enterprise Hub Company store.

Before you can create the policy, you need the following:

  • An AET (.aetx) signing certificate from DigiCert
  • The Citrix Company Hub app signed by using the Microsoft app signing tool (XapSignTool.exe)


Endpoint Management supports only one Enterprise Hub policy for one mode of Windows Phone Secure Hub. For example, to upload Windows Phone Secure Hub for Endpoint Management, don’t create multiple Enterprise Hub policies with different versions of Secure Hub. You can only deploy the initial Enterprise Hub policy during device enrollment.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

Windows Phone settings

Device Policies configuration screen

  • Upload .aetx file: Select the .aetx file by clicking Browse and navigating to the file location.
  • Upload signed Enterprise Hub app: Select the Enterprise Hub app by clicking Browse and navigating to the app location.
Enterprise Hub device policy