Citrix Endpoint Management

Supported device operating systems

This article covers supported devices for enterprise mobility management with Endpoint Management. Because of platform restrictions and security features, Endpoint Management doesn’t support all functionality on all platforms.

For the latest versions of the mobile productivity apps, see Support for mobile productivity apps.


Citrix supports, at a minimum, the current and prior version of each major operating system platform. Not all features of the newer version of Endpoint Management work on older platform releases.

For deprecation announcements, see Deprecation.

Operating system support list

Citrix Endpoint Management supports the following operating systems:


Support ended for the Android 6.x and iOS 11.x versions of Secure Hub, Secure Mail, Secure Web, and Citrix Workspace app in June 2020.

  • Android: 7.x, 8.x, 9.x, 10.x, 11.x

    For Android 10+, see Android considerations.

  • Chrome OS: Chromebook

  • iOS: 12.x, 13.x, 14.x

    Endpoint Management and Citrix mobile apps are compatible with iOS 14.x, but don’t currently support all new iOS 14.x features. The MDX Service currently doesn’t support wrapping iOS apps for iOS 14.x. To wrap in-house enterprise apps for iOS 14, use the MDX Toolkit 20.8.5 or later.

  • iPadOS: 13.x, 14.x

    Endpoint Management and Citrix mobile apps are compatible with iPadOS 14.x, but don’t currently support all new iPadOS 14.x features.

  • macOS: 10.13x, 10.14x, 10.15x, 11.x

    Endpoint Management and Citrix mobile apps are compatible with macOS 11, but don’t currently support all new macOS 11 features.

  • tvOS: 10.2, 11.x, 12.x, 13.x. Requires 4th generation Apple TV devices enrolled using Apple Deployment Program.

  • Windows 10 Desktops and Tablets: (MDM only)
    • Windows 10 Professional
    • Windows 10 Enterprise
    • Windows 10 Education
    • Windows IoT Enterprise

    Refer to Microsoft documentation for the level of support for a specific operating system.

  • Windows Phone: (MDM only). Windows Phone 8.1, Windows Phone 10, Windows 10 RS4, and Windows 10 RS5.

  • Windows Mobile/CE: (MDM only). Starting the second quarter of 2018, support for Windows Mobile/CE devices is no longer available.

  • Raspberry Pi platform: Citrix Ready workspace hub, built on the Raspberry Pi 3 platform. For more information about Workspace hub requirements, see Citrix Ready workspace hub.

  • Samsung SAFE and Knox: On compatible Samsung devices, Endpoint Management supports and extends both Samsung for Enterprise (SAFE) and Samsung Knox policies. Endpoint Management requires that you enable the SAFE APIs before you deploy SAFE policies and restrictions. To do that, deploy the built-in Samsung Enterprise License Management (ELM) key to a device. See Samsung MDM license key device policy.

  • HTC: For HTC-specific policies, HTC API version 0.5.0

  • Sony: For Sony-specific policies, Sony Enterprise SDK 2.0

Android considerations

Before upgrading to Android 10 or later: For information about how the deprecation of Google Device Administration APIs impacts devices running Android 10+, see Migrate from device administration to Android Enterprise. Also see this Citrix blog.

  • Citrix recommends that you avoid enrolling Android 10 devices in legacy device administration mode. Google is deprecating Device Administration APIs, which impact devices running Android 10+. After the APIs get deprecated, enrollment of Android 10+ devices in legacy device administration mode will fail. Citrix doesn’t support enrolling Android 11 devices in device administration mode.
  • Citrix recommends using Android Enterprise for Android 10+ devices. For more information, see Migrate from device administration to Android Enterprise.
  • The Google API change doesn’t impact devices enrolled in MAM-only mode.
  • Also see this Citrix blog.

Before upgrading:

  • Ensure that your server infrastructure is compliant with security certificates that have a matching host name in the subjectAltName (SAN) extension.
  • To verify a host name, the server must present a certificate with a matching SAN. Citrix trusts certificates only if they contain a SAN that matches the host name.

Supported device operating systems