The announcements in this article are advanced notice of the Citrix Endpoint Management features that are being phased out, so that you can make timely business decisions. Citrix monitors customer use and feedback to determine when they are withdrawn. Announcements can change in subsequent releases and might not include every deprecated feature or functionality. For details about product lifecycle support, see the Product Lifecycle Support Policy article.
Deprecations and removals
The following list shows the Citrix Endpoint Management features that are deprecated or removed.
Deprecated items are not removed immediately. Citrix continues to support a deprecated item until removing it in a future release.
Removed items are either removed, or are no longer supported, in Citrix Endpoint Management.
For information about the mobile productivity apps that reached End of Life, see EOL and deprecated apps.
|RSA soft token support for Android||Deprecating the direct import of RSA soft tokens into Secure Hub for Android.||January 2021||February 2021||You can import the RSA soft token inside the RSA secure ID app available in Google Play. You can then use the token for Citrix Gateway authentication.|
|Android - Sony||Deprecated support for Android Sony devices and Sony-specific policies.||January 2021||February 2021||Use Android Enterprise|
|Android - HTC||Deprecated support for Android HTC devices and HTC-specific policies.||January 2021||February 2021||Use Android Enterprise|
|Gateway configuration checks in Endpoint Management Analyzer||Deprecated support for the Gateway configuration check option||November 2020||November 2020||Use the Citrix Insight Services check in Analyzer to check your Citrix ADC configurations for Endpoint Management deployment readiness. See Endpoint Management Analyzer.|
|API sign in using local accounts||Administrators will no longer be able to sign in to the REST API using a local account.||October 2020||Administrators can log in using a Citrix Cloud account. See REST API.|
|APNs outgoing ports||Deprecated support for ports 2195 and 2196, used to send APNs notifications to
||October 2020||Target: March 31, 2021||Use port 443 instead. See Network and firewall requirements.|
|Apps published for the legacy Device Administrator mode on Android Enterprise devices||We will stop delivering apps published for the legacy DA platform to devices enrolled in Android Enterprise.||October 2020||Target: November 2020||For Android Enterprise devices, publish apps for the Android Enterprise platform. To continue to publish legacy DA apps to devices in DA mode, create a separate delivery group for those apps.|
|Samsung SEAMS container||Deprecated support for the Samsung SEAMS container.||June 2020||August 2020||Use the Samsung Knox Service Plugin (KSP) app for Android Enterprise. See Add the Knox service plug-in app.|
|Self-signed Secure Sockets Layer (SSL) certificates||Deprecated support for self-signed SSL certificates for all device platforms.||May 2020||Replace your existing self-signed certificate with a trusted SSL certificate from a well-known certificate authority (CA).|
|Certificate-based authentication signature algorithms (non-FIPS and weak ciphers)||Deprecated support for the following signature algorithms: SHA1withRSA, SHA224withRSA, SHA1withECDSA, SHA224withECDSA, SHA1withDSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA.||May 2020||Target: January 2021||When you create a CSR for a credential provider in the Endpoint Management console (Settings > Credential Providers > Certificate Signing Request), choose a stronger cipher.|
|Citrix Launcher||Deprecated support for the Citrix Launcher app||May 2020||August 2020 (remove from the app store)||Create an enrollment profile with a Device Owner mode of Dedicated device. For more information, see Citrix Launcher replacement.|
|Citrix mobility apps and Workspace apps for Android 6.x and iOS 11.x||Deprecated support for the Android 6.x and iOS 11.x versions of Secure Hub, Secure Mail, Secure Web, and Citrix Workspace app.||April 2020||June 2020||Use, at a minimum, the current and prior version of each major operating system platform. Older devices remain enrolled. However, Citrix doesn’t test or support the legacy devices.|
|MDX Toolkit and MDX Service||Deprecated support for the MDX Toolkit and MDX Service in favor of the Mobile App Management (MAM) SDK. During the transition period, you can use both MDX wrapped apps and MAM SDK developed apps.||March 2020||Target: September 2021||To continue managing your enterprise applications, use the MAM SDK.|
|MDX: Alternative Gateway Server||Deprecated step-up authentication for iOS and Android devices.||March 2020||Target: September 2021||No alternative|
|MDX: Micro VPN (full tunnel mode)||Deprecated a full virtual private network (VPN) tunnel for iOS and Android devices.||March 2020||Target: September 2021||Use the MAM SDK Web SSO mode or create a per-app VPN policy with the Citrix SSO connection type.|
|MDX: PAC file support||Deprecated support for a Proxy Automatic Configuration (PAC) file with a full VPN tunnel deployment for iOS and Android devices.||March 2020||Target: September 2021||Use Citrix Gateway to connect through a proxy server for access to internal networks.|
|MDX shared device support||Deprecated shared device support for MDX apps.||March 2020||Target: September 2021||For Android Enterprise, use shared devices in dedicated device enrollment mode. For iOS, use Apple School Manager or GroundControl.|
|New Device Administrator enrollments for Android 10||Deprecated support for new enrollments or re-enrollments into the legacy Device Administrator mode on Android 10 devices. Already enrolled devices continue to work.||February 2020||September 2020||Enroll new Android 10+ devices into Android Enterprise.|
|Legacy Device Administrator mode for Android 10 devices||Google deprecated some Device Administrator APIs. Citrix won’t support Android 10 devices enrolled into Device Administrator mode after we upgrade Citrix Secure Hub to target Android API level 29.||February 2020||Target: November 2020||Migrate Android 10 devices to Android Enterprise.|
|MDX encryption||Deprecated MDX encryption and the MDX encryption feature in the Endpoint Management console.||October 2019||September 2020||Enable iOS or Android platform encryption using our Encryption Management feature with added compliance checking. Ensure you have tested and planned for migration off MDX encryption by July 2020.|
|Passcode device policy: The No Restrictions setting for Android Enterprise||Android Enterprise devices running Android 7 or higher only support a passcode created with character restrictions. If you previously set Required characters to No Restrictions, this update changes that value to Numbers only.||February 2019||April 2019||This change doesn’t affect the current user sign-in experience.|
|Remote Support||The Remote Support client is not available for Endpoint Management.||January 2019||August 2020||No alternative|
|Secure Hub Network Extensions for iOS||Deprecated the Network Extension framework that allowed you to customize networking features for iOS devices. Secure Hub release 20.3.0.||October 2018||March 2020||No alternative|
|Android TouchDown||DigiCert stopped supporting Android TouchDown. Citrix removed the Android TouchDown platform page from the Exchange device policy.||July 2018||November 2020||Recommendation: Use Citrix Secure Mail.|
|TLS versions 1.0 and 1.1||To improve the security of the Citrix Endpoint Management service, Citrix now blocks any communication over Transport Layer Security (TLS) 1.0 and 1.1. As a result of its weakening security, the PCI Council is deprecating TLS 1.0 and TLS 1.1.||June 2018||March 2019||Upgrade to TLS 1.2.|
|Windows Mobile/CE||Support for Windows Mobile/CE devices is no longer available.||April 2018||September 2020||Use Windows 10 Desktop and Laptop.|