Supported device operating systems

This article covers supported devices for enterprise mobility management with Endpoint Management. Because of platform restrictions and security features, Endpoint Management doesn’t support all functionality on all platforms.

For the latest versions of the mobile productivity apps and supported devices for MDX encryption, see Support for mobile productivity apps.


Citrix supports, at a minimum, the current and prior version of each major operating system platform. Not all features of the newer version of Endpoint Management work on older platform releases.

For deprecation announcements, see Deprecation.

Operating system support list

Citrix Endpoint Management supports the following operating systems:


Support is ending for the Android 6.x and iOS 11.x versions of Secure Hub, Secure Mail, Secure Web, and Citrix Workspace app in June 2020.

  • Android: 6.x, 7.x, 8.x, 9.x, Android Q


    For Android Q, see Android considerations.

  • Chrome OS: Chromebook
  • iOS: 11.x, 12.x, 13.x
  • iPadOS: 13.x
  • macOS: 10.11, 10.12, 10.13
  • tvOS: 10.2, 11.x, 12.x, 13.x. Requires 4th generation Apple TV devices enrolled using Apple Deployment Program.
  • Windows 10 Desktops and Tablets: (MDM only)
    • Windows 10 Professional
    • Windows 10 Enterprise
    • Windows 10 Education
  • Windows Phone: Windows Phone 8.1, Windows Phone 10, Windows 10 RS4, and Windows 10 RS5. MDM only.
  • Windows Mobile/CE: (MDM only). Starting the second quarter of 2018, support for Windows Mobile/CE devices is no longer available.
  • Raspberry Pi platform: Citrix Ready workspace hub, built on the Raspberry Pi 3 platform. For more information about Workspace hub requirements, see Citrix Ready workspace hub.
  • Symbian devices: Starting the second quarter of 2018, support for Symbian devices is no longer available to new customers. The following list includes some of the Symbian devices that Endpoint Management supports for customers who previously configured these devices.
    • Symbian 3
    • Symbian S60 5th Edition
    • Symbian S60 3rd Edition, Feature Pack 2
    • Symbian S60 3rd Edition, Feature Pack 1
    • Symbian S60 3rd Edition
    • Symbian S60 2nd Edition, Feature Pack 3
    • Symbian S60 2nd Edition, Feature Pack 2
  • Samsung SAFE and Knox: On compatible Samsung devices, Endpoint Management supports and extends both Samsung for Enterprise (SAFE) and Samsung Knox policies. Endpoint Management requires that you enable the SAFE APIs before you deploy SAFE policies and restrictions. To do that, deploy the built-in Samsung Enterprise License Management (ELM) key to a device. To enable the Samsung Knox API:
    1. Purchase a Samsung Knox license by using the Samsung Knox License Management System (KLMS).
    2. Deploy the Samsung ELM key.
  • HTC: For HTC-specific policies, HTC API version 0.5.0
  • Sony: For Sony-specific policies, Sony Enterprise SDK 2.0

Android considerations

Before upgrading to the Android Q platform: See Migrate from device administration to Android Enterprise for information about how the deprecation of Google Device Administration APIs impacts devices running Android Q. Also see this Citrix blog.

  • Citrix recommends that you avoid enrolling Android Q devices in legacy device administration mode. Google is deprecating Device Administration APIs, which impact devices running Android Q. After the APIs get deprecated, enrollment of Android Q devices in legacy device administration mode will fail.
  • Citrix recommends using Android Enterprise for Android Q devices. For more information, see Migrate from device administration to Android Enterprise.
  • The Google API change doesn’t impact devices enrolled in MAM-only mode.
  • Also see this Citrix blog.

Before upgrading to the Android P platform:

  • Ensure that your server infrastructure is compliant with security certificates that have a matching host name in the subjectAltName (SAN) extension.
  • To verify a host name, the server must present a certificate with a matching SAN. Citrix trusts certificates only if they contain a SAN that matches the host name.
  • For details, see the Android Developer site article on Android P behavior changes.

With the release of Android O (version 8):

  • SSLv3 is not supported with Android O. Google no longer supports SSLv3 connections. As a result, mobile productivity apps running on Android O devices cannot connect to internal servers that use SSLv3 connections. If you have servers using SSLv3, it’s important to address its limitations before rolling out Android O. Addressing those limitations avoid connectivity failures with users.
  • Support ended for Android 4.4x as of the version 10.6.20 public app store release of Citrix mobile productivity apps.
  • Citrix mobile productivity apps and MDX-wrapped apps are available on Android devices with ARM-based processors. They are not supported on Intel x86 or x64-based Android devices.

Supported device operating systems