Citrix Endpoint Management

Supported device operating systems

This article covers supported devices for enterprise mobility management with Endpoint Management. Because of platform restrictions and security features, Endpoint Management doesn’t support all functionality on all platforms.

For the latest versions of the mobile productivity apps and supported devices for MDX encryption, see Support for mobile productivity apps.


Citrix supports, at a minimum, the current and prior version of each major operating system platform. Not all features of the newer version of Endpoint Management work on older platform releases.

For deprecation announcements, see Deprecation.

Operating system support list

Citrix Endpoint Management supports the following operating systems:


Support is ending for the Android 6.x and iOS 11.x versions of Secure Hub, Secure Mail, Secure Web, and Citrix Workspace app in June 2020.

  • Android: 7.x, 8.x, 9.x, 10.x, 11.x


    For Android 10, see Android considerations.

  • Chrome OS: Chromebook
  • iOS: 11.x, 12.x, 13.x, 14

    Endpoint Management and Citrix mobile apps are compatible with iOS 14, but don’t currently support new iOS 14 features. The MDX Service currently doesn’t support wrapping iOS apps for iOS 14. Use the MDX Toolkit 20.8.5 or later.

  • iPadOS: 13.x
  • macOS: 10.11, 10.12, 10.13
  • tvOS: 10.2, 11.x, 12.x, 13.x. Requires 4th generation Apple TV devices enrolled using Apple Deployment Program.
  • Windows 10 Desktops and Tablets: (MDM only)
    • Windows 10 Professional
    • Windows 10 Enterprise
    • Windows 10 Education
    • Windows IoT Enterprise

    Refer to Microsoft documentation for the level of support for a specific operating system.

  • Windows Phone: Windows Phone 8.1, Windows Phone 10, Windows 10 RS4, and Windows 10 RS5. MDM only.
  • Windows Mobile/CE: (MDM only). Starting the second quarter of 2018, support for Windows Mobile/CE devices is no longer available.
  • Raspberry Pi platform: Citrix Ready workspace hub, built on the Raspberry Pi 3 platform. For more information about Workspace hub requirements, see Citrix Ready workspace hub.
  • Symbian devices: Starting the second quarter of 2018, support for Symbian devices is no longer available to new customers. The following list includes some of the Symbian devices that Endpoint Management supports for customers who previously configured these devices.
    • Symbian 3
    • Symbian S60 5th Edition
    • Symbian S60 3rd Edition, Feature Pack 2
    • Symbian S60 3rd Edition, Feature Pack 1
    • Symbian S60 3rd Edition
    • Symbian S60 2nd Edition, Feature Pack 3
    • Symbian S60 2nd Edition, Feature Pack 2
  • Samsung SAFE and Knox: On compatible Samsung devices, Endpoint Management supports and extends both Samsung for Enterprise (SAFE) and Samsung Knox policies. Endpoint Management requires that you enable the SAFE APIs before you deploy SAFE policies and restrictions. To do that, deploy the built-in Samsung Enterprise License Management (ELM) key to a device. To enable the Samsung Knox API:
    1. Purchase a Samsung Knox license by using the Samsung Knox License Management System (KLMS).
    2. Deploy the Samsung ELM key.
  • HTC: For HTC-specific policies, HTC API version 0.5.0
  • Sony: For Sony-specific policies, Sony Enterprise SDK 2.0

Android considerations

Before upgrading to Android 10 or later: For information about how the deprecation of Google Device Administration APIs impacts devices running Android 10+, see Migrate from device administration to Android Enterprise. Also see this Citrix blog.

  • Citrix recommends that you avoid enrolling Android 10 devices in legacy device administration mode. Google is deprecating Device Administration APIs, which impact devices running Android 10+. After the APIs get deprecated, enrollment of Android 10+ devices in legacy device administration mode will fail. Citrix doesn’t support enrolling Android 11 devices in device administration mode.
  • Citrix recommends using Android Enterprise for Android 10+ devices. For more information, see Migrate from device administration to Android Enterprise.
  • The Google API change doesn’t impact devices enrolled in MAM-only mode.
  • Also see this Citrix blog.

Before upgrading:

  • Ensure that your server infrastructure is compliant with security certificates that have a matching host name in the subjectAltName (SAN) extension.
  • To verify a host name, the server must present a certificate with a matching SAN. Citrix trusts certificates only if they contain a SAN that matches the host name.

Supported device operating systems