Clipboard container control

Deployments that use Chrome for web access and VDI for native applications can use the Clipboard container feature to control data sharing between the browser and VDI sessions. Clipboard data is transferred directly between Citrix sessions without being written to the local endpoint clipboard. This improves security while still giving users flexibility to work across both environments.

Supported deployments: Secure Private Access service and hybrid deployments.

Supported platforms: Windows.

Prerequisites

Ensure that the following prerequisites are met:

• Citrix Workspace app 2603.10 or later.
• Windows VDA running 2507 LTSR ot later.

• For existing Citrix Virtual Apps and Desktops environments, enable the following:

  • Cross clipboard container with DaaS feature. For details, see Cross clipboard container with DaaS. This feature is currently available as a preview in DaaS.
  • Clipboard Sharing Scope registry. For details, see Enable the Clipboard Sharing Scope registry.

Enable Clipboard Container control

1. Log in to the Secure Private Access admin console.
2. Go to Policies > Browser Policies, and then click Create browser policy.
3. Select Clipboard container, and then click Manage.

4. Click Add Rule to add rules for the clipboard share between VDA and browser.

   1. Enter the name for the rule and click Next.
   2. Select conditions based on your requirement such as user or group. You can also add conditions such as Geo-location, Network location, and Device posture check.
   3. Click Next.

   4. Define the URL and Secure Private Access applications to allow clipboard sharing.

   5. Select the policy scope.
   • Apply to entire browser — The policy governs all clipboard activity in the managed profile.

   • Apply to specific applications and URLs — The policy is limited to selected applications and the URL/domain patterns entered.

     • Select Application — Select the specific published applications using the application picker.
     • URL or Domain - Enter the URL or the domains of the specific application.

   

5. Click Save.

   The number of rules configured for the clipboard container policy appears in the Browser Policies > Clipboard container tab.

Enable the Clipboard Sharing Scope registry

Perform the following steps to enable the Clipboard Sharing Scope registry:

1. Open the Windows Registry Editor using regedit.exe.
2. Navigate to HKEY_LOCAL_MACHINE\Software\Citrix\Clipboard.
3. Create a REG_DWORD [DWORD (32 bit)] value named ClipboardSharingScope.

The ClipboardSharingScope policy controls where VDA clipboard data can be shared. Until the new DDC policy is available, this setting can be configured using the preceding registry key.

Note:

• The CEP only (2) and VDA and CEP (3) modes are designed to work with the Clipboard Container feature in the CEP extension.

• When the Clipboard Container policy is enabled, only administrator-configured URLs are allowed to exchange clipboard data with the VDI.

  • Content copied from the approved web applications can be pasted into the VDI.
  • Content copied from the VDI can be pasted only into administrator-configured, paste-allowed URLs.
  • If a user attempts to paste VDI clipboard content into a website that is not included in the policy, the paste operation is blocked and an error message appears.