Citrix Virtual Apps and Desktops

Advanced configuration for custom applications

For enterprises that have any other web applications (i.e not Chrome, Edge, Firefox or Brave), the following change needs to be made for FIDO2 redirection to work inside HDX sessions:

  1. Configure the FIDO2 allowed processes policy setting in Studio.

    • Add the full path of the application in the text field. Additional details on policy setting usage can be found in the policies section.

      Note:

      The use of wildcards (*) is supported. You can use wildcards when the names of directories or executables change based on the version of the application, or if the application is installed in the users’ profiles.

      fido2

  2. Add the following registry keys and values:
    1. For 64 bit applications (e.g. “app1.exe”):

      • Key: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_DLLs\CtxWebAuthnHook\app1.exe
    2. For 32 bit applications:

      • Key: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\CtxHook\AppInit_DLLs\CtxWebAuthnHook\app1.exe
  3. Reboot the VDA after setting the registry values for FIDO2 redirection to be enabled for app1.exe.

Note:

  • Step 2 and 3 are not needed for msedgewebview2.exe.
  • Editing the registry incorrectly can cause serious problems that might require you to reinstall your operating system. Citrix cannot.
  • Guarantee that problems resulting from the incorrect use of the Registry Editor can be solved.
  • Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.
Advanced configuration for custom applications

In this article