Configure

After the Citrix Workspace app for Mac software is installed, the following configuration steps allow users to access their hosted applications and desktops.

Users might connect from the Internet or from remote locations. For those users, configure the authentication through Citrix Gateway.

Administrator tasks and considerations

This article discusses the tasks and considerations that are relevant for administrators of Citrix Workspace app for Mac.

Important:

If you are running macOS 10.15, ensure that your system is compliant with Apple’s requirements for trusted certificates in macOS 10.15. Perform this check before you upgrade to Citrix Workspace app for Mac version 2106.

Feature flag management

If an issue occurs with Citrix Workspace app in production, we can disable an affected feature dynamically in Citrix Workspace app even after the feature is shipped. To do so, we use feature flags and a third-party service called LaunchDarkly.

You do not need to make any configurations to enable traffic to LaunchDarkly, except when you have a firewall or proxy blocking outbound traffic. In that case, you enable traffic to LaunchDarkly via specific URLs or IP addresses, depending on your policy requirements.

You can enable traffic and communication to LaunchDarkly in the following ways:

Enable traffic to the following URLs

• events.launchdarkly.com
• stream.launchdarkly.com
• clientstream.launchdarkly.com
• Firehose.launchdarkly.com
• mobile.launchdarkly.com

List IP addresses in an allow list

If you must list IP addresses in an allow list, for a list of all current IP address ranges, see LaunchDarkly public IP list. You can use this list to ensure that your firewall configurations are updated automatically in keeping with the infrastructure updates. For details about the status of the infrastructure changes, see LaunchDarkly Statuspage page.

LaunchDarkly system requirements

Ensure that the apps can communicate with the following services if you have split tunneling on Citrix ADC set to OFF for the following services:

• LaunchDarkly service.
• APNs listener service

Support for admin configuration of user devices through MDM tool

Admins can now configure the following settings while deploying Citrix Workspace app through any MDM deployment tool such as Citrix Endpoint Management:

• StoreURLs – Configure store details so it’s automatically added when the user opens the Citrix Workspace app, simplifying the sign-on experience. To add a store, provide the details for the StoreURLs setting. For example:

  <array>

  <string>https://myorg.com/Org/storename</string>

  </array>

  You can also add multiple stores as follows:

  <array>

  <string>https://myorg.com/Org/storename1</string>

  <string>https://myorg.com/Org/storename2</string>

  </array>

To add the StoreURLs to Citrix Workspace app, the user must quit and relaunch Citrix Workspace app.

• BlockStoreAddition – Prevent the user from adding stores.

  To block the user from adding a store, set the value of the BlockStoreAddition setting to True.

Provision to disable LaunchDarkly service through MDM tool

Starting with version 2210, you can disable the LaunchDarkly service on Citrix Workspace app, irrespective of whether their users are inside or outside the organization’s firewall. To disable the LaunchDarkly service, set the value for the DisableFeatureFlag setting to True.

This service is available for admins who manage Mac devices using the MDM tool.

Note:

Disabling the FeatureFlag requires the admin to restart the device for this setting to take effect.

App Protection

Starting with 2301 release, App Protection is enhanced to protect the Citrix Workspace app. This enhancement includes protecting the authentication screen and the screen that you see after signing into the Workspace app. For more information, see App Protection.

This feature can be configured using the Global App Configuration service.

To configure App Protection on Citrix Workspace app for Mac, see Citrix Workspace app for Mac section in the Configuration article.

Note:

• This feature is available only for customers on cloud stores.
• The Global App Configuration service configurations don’t apply for virtual apps, virtual desktops, web apps, and SaaS apps. These resources continue to be controlled using the Delivery Controller and Citrix Secure Private Access. For more information, see configure section of App Protection in the Citrix Virtual Apps and Desktops documentation.

Sentry

Sentry is used to collect app logs to analyze issues and crashes to improve product quality. Citrix does not collect or store any other personal user information or use Sentry for feature analytics data. For more information about Sentry, go to [https://sentry.io/welcome/].

FIDO2 for password-less authentication

Citrix Workspace app for Mac supports password-less authentication using FIDO2 security keys when connecting to a cloud store or within an HDX session. FIDO2 security keys provide a seamless way for enterprise employees to authenticate to apps or desktops that support FIDO2 without entering a user name or password. This feature currently supports roaming authenticators (USB only) with PIN code and touchID. This feature is supported on macOS 12 and later versions.

For more information about FIDO2 see FIDO2 Authentication.

For information about the prerequisites and using this feature, see Local authorization and virtual authentication using FIDO2.

FIDO2 based authentication when connecting to cloud store

Citrix Workspace app uses the user’s default browser for FIDO2 authentication (Web Authentication), when connecting to cloud store. Administrators can configure the type of browser to authenticate to Citrix Workspace app. The FIDO2 feature is currently not supported for on-premises stores. For more information on the web browser settings, see Global App Configuration Service documentation.

The following table lists the settings that allow you to select the type of browser used for authenticating an end user into Citrix Workspace app:

The configured setting can be pushed using the Mobile Device Management (MDM), Global App Config Service (GACS), or the command line interface methods by running the following commands:

• Enable FIDO2 using MDM: To enable authentication through MDM, administrators must use the following setting:

  <key>WebBrowserForAuthentication</key><string>System</string>

• Enable FIDO2 using GACS: To enable authentication through GACS, administrators must use the following setting:

{
    "serviceURL": {
      "url": "https://serviceURL:443"
    },
    "settings": {
      "name": "Web browser for Authenticating into Citrix Workspace",
      "description": "Allows admin to select the type of browser used for authenticating an end user into Citrix Workspace app",
      "useForAppConfig": true,
      "appSettings": {
        "macos": [
          {
            "assignedTo": [
              "AllUsersNoAuthentication"
            ],
            "category": "authentication",
            "settings": [
              {
                "name": "web browser for authentication",
                "value": "SystemWithPrivateSession"
              }
            ],
            "userOverride": false
          }
        ]
      }
    }
  }

<!--NeedCopy-->

• Enable FIDO2 using the command-line interface: To enable authentication using the command-line interface, administrators must run the following command:

  defaults write com.citrix.receiver.nomas WebBrowserForAuthentication System

FIDO2 based authentication within an HDX session

You can configure FIDO2 Security Keys to authenticate within an HDX session. This feature currently supports roaming authenticators (USB only) with PIN code.

When you access an app or a website that supports FIDO2, a prompt appears, requesting access to the security key. If you’ve previously registered your security key with a PIN (a minimum of 4 and a maximum of 64 characters), then you must enter the PIN while signing in.

If you’ve registered your security key previously without a PIN, simply touch the security key to sign in.

This feature is enabled by default for Citrix Workspace app for 2307 and future releases. You can disable FIDO2 authentication using the Mobile Device Management (MDM) or command-line interface methods by running the following commands:

• Disable FIDO2 based authentication using MDM: To disable this feature through MDM, administrators must use the following setting:

  <key>Fido2Enabled</key><false/>

• Disable FIDO2 based authentication using the command-line interface: To disable this feature, run the following command in command-line interface methods:

  defaults write com.citrix.receiver.nomas Fido2Enabled -bool NO

Quick access menu for StoreFront

Starting with the 2307 release, you can navigate to your favorite apps and desktops quickly and easily using the quick access feature for on-premises stores. To enable quick access, right-click Citrix Workspace in the toolbar, navigate to Preferences > General, and then select Show Quick Access for Storefront experience. This feature allows you to see your favorite data directly from the Mac menu bar.

You can enable the quick access feature by using Preferences.

Administrators can enable or disable the quick access feature by using the Mobile Device Management (MDM) or Global App Config Service (GACS) methods.

Enabling or disabling quick access using MDM

To enable quick access through MDM, administrators must use the following setting:

<key>ShowQuickAccessForStoreFront</key> <false/>

Enabling or disabling quick access using GACS

To enable quick access through GACS, administrators must use the following setting:

enableQuickAccessForStoreFront

Citrix Enterprise Browser

This release includes Citrix Enterprise Browser version 113.1.1.34, based on Chromium version 113. For more information about the Citrix Enterprise Browser, see Citrix Enterprise Browser documentation.

Citrix Enterprise Browser shortcut

Starting with the Citrix Workspace app for Mac 2307 version, an administrator can configure and control the presence of Citrix Enterprise Browser shortcut on launch pad.

Note:

By default, this feature isn’t configured.

Configuration

An IT administrator can configure the presence of Citrix Enterprise Browser shortcut in one of the following ways:

• Mobile Device Management (MDM)
• Global Admin Configuration service (GACS)
• web.config file.

Note:

• All the configuration methods have equal priority. Enabling any one of them enables the shortcut.
• If you haven’t configured the shortcut but have one or more cloud stores, the shortcut gets automatically enabled.
• Administrators can turn off this feature for cloud users by setting the CEBShortcutEnabled attribute to false, or by disabling the Enable Citrix Enterprise Browser shortcut property.

Mobile Device Management (MDM)

Administrators can push the settings CEBShortcutEnabled to the user’s device.

For more information on how to use MDM, see Mobile Device Management (MDM) page in the Citrix Workspace app for Mac documentation.

Note:

This way of configuration is applicable on cloud and on-premises deployments.

Global Admin Configuration service (GACS)

Navigate to Workspace Configuration > App Configuration > Citrix Enterprise Browser and enable Enable Citrix Enterprise Browser shortcut.

For more information about how to use the GACS UI, see User interface article in the Citrix Enterprise Browser documentation.

Note:

This way of configuration is applicable on cloud and on-premises deployments.

web.config file

Enable the attribute CEBShortcutEnabled under the properties.

                        <properties>
                            <property name="CEBShortcutEnabled" value="True" />
                        </properties>


<!--NeedCopy-->

Note:

This way of configuration is applicable for on-premises deployments only.

Using web.config

To enable Citrix Enterprise Browser shortcut, do the following:

1. Use a text editor to open the web.config file, which is typically at C:\inetpub\wwwroot
   Citrix\Roaming directory.

2. Locate the user account element in the file (Store is the account name of your deployment).

   For example: <account id=... name="Store">

3. Before the </account> tag, navigate to the properties of that user account and add the following:

   
                       <properties>
                           <property name="CEBShortcutEnabled" value="True" />
                       </properties>
   
   <!--NeedCopy-->
   

Following is an example of web.config file:

<account>
    <clear />
    <account id="d1197d2c-ac82-4f13-9346-2ee14d4b0202" name="F84Store"
      description="" published="true" updaterType="Citrix" remoteAccessType="None">
      <annotatedServices>
        <clear />
        <annotatedServiceRecord serviceRef="1__Citrix_F84Store">
          <metadata>
            <plugins>
              <clear />
            </plugins>
            <trustSettings>
              <clear />
            </trustSettings>
            <properties>
                  <property name="CEBShortcutEnabled" value="True" />
            </properties>
          </metadata>
        </annotatedServiceRecord>
      </annotatedServices>
      <metadata>
        <plugins>
          <clear />
        </plugins>
        <trustSettings>
          <clear />
        </trustSettings>
        <properties>
          <clear />
        </properties>
      </metadata>
    </account>

<!--NeedCopy-->

How to configure using web.config

1. Use a text editor to open the web.config file, which is typically at C:\inetpub\wwwroot\Citrix\Roaming directory.

2. Locate the user account element in the file (Store is the account name of your deployment).

   For example: <account id=... name="Store">

3. Before the </account> tag, navigate to the properties of that user account and add the following:

   
                       <properties>
                           <property name="CEBShortcutEnabled" value="True" />
                       </properties>
   
   
   <!--NeedCopy-->
   

Send feedback on Citrix Workspace app

The Send feedback option allows you to inform Citrix about any issues you might encounter while using the Citrix Workspace app. You can also send suggestions to help us improve your Citrix Workspace app experience.

You must select Help > Send feedback to view and fill the issue details in the Send feedback form. You can add details like the examples provided in the form.

You can attach the existing log files or generate new log files. To generate log files, click Record my issue > Start Recording and then reproduce the issue. After the issue is reproduced, click Stop Recording. The log file is saved automatically and replaces the existing logs with the reproduced logs.

Note:

Citrix does not collect any Personally Identifiable Information (PII) from the logs.

You can attach screenshots or screen recordings describing the issue to help us understand what you’re experiencing. Click Choose files and add the attachments describing your issues, such as screenshots or screen recordings. You can attach a maximum of four files.

Once you’ve entered the necessary information, click Send to have a new email automatically created in your Mail app with the information you added. From there, click the Send button to share the feedback with Citrix. For more information, see Send feedback on Citrix Workspace app.

Note:

If you aren’t using the default Mail app, then send feedback to cwa-mac-feedback@cloud.com from your mail client. Add the issue details, log files, screenshots, or screen recordings to the email manually.

Enhanced auto start experience

Previously, Citrix Workspace app for Mac used to start automatically whenever a computer was turned on. Starting with the 2304 release, you can choose to disable or enable the auto start feature on Citrix Workspace app for Mac by navigating to Preferences > General > Start Workspace on system startup. The auto start setting is enabled by default.

Improved experience for optimized Microsoft Teams video conference calls

Starting with 2304 release, by default simulcast support is enabled for optimized Microsoft Teams video conference calls. With this support, the quality and experience of video conference calls across different endpoints are improved by adapting to the proper resolution for the best call experience for all callers.

With this improved experience, each user might deliver multiple video streams in different resolutions (for example, 720p, 360p, and so on) depending on several factors including endpoint capability, network conditions, and so on The receiving endpoint then requests the maximum quality resolution that it can handle thereby giving all users the optimum video experience.

Note:

This feature is available only after the roll-out of an update from Microsoft Teams. For information on ETA, go to https://www.microsoft.com/ and search for Microsoft 365 roadmap. When the update is rolled-out by Microsoft, you can check CTX253754 for the documentation update and the announcement.

Support for Certificate-based authentication

With this release, Workspace administrators can configure and enforce Azure Active Directory conditional access policies for users authenticating to Citrix Workspace app.

The following methods can be used to enable the authentication using conditional access:

• Mobile Device Management (MDM)
• Global App Config Service (GACS)

The flag values read by Citrix Workspace app take precedence in the following order:

• Mobile Device Management (MDM)
• Global App Config Service (GACS)

Enabling authentication using conditional access through MDM

To enable authentication using conditional access with Azure AD through MDM, admins must use the following setting:

<key>enableAAD</key> <true/>

This setting supports Boolean values. The value is set to false by default. The default value is considered if the key value is not available.

Enabling authentication using conditional access through GACS

To enable authentication using conditional access with Azure AD through GACS, admins must use the following setting:

enable conditional AAD

For more information, see Supported settings and their values per platform for macOS in GACS documentation.

Channel support for Global App Configuration Service

The Global App Configuration Service for Citrix Workspace allows a Citrix administrator to deliver Workspace service URLs and Workspace App settings through a centrally managed service. Global App Configuration service now allows administrators to test the settings before rolling it out to all users. This feature allows to resolve any issues before applying the global app configurations to the entire user base.

You can achieve the channel support by mapping the settings that you want to test to a channel and then add the channel in the payload. For more information, see Global App Configuration Service documentation.

Improved auto-update experience

The auto-update feature automatically updates the Citrix Workspace app to the latest version without the need for any user intervention.

Citrix Workspace app periodically checks and downloads the latest available version of the app. Citrix Workspace app determines the best time to install based on user activity not to cause any disruptions.

When the installation is complete, the following notification appears:

If the Citrix Workspace app can’t find the right time to install the updates in the background, Citrix Workspace Updater will prompt the user for the installation.

Force login prompt for Federated identity provider

Citrix Workspace app now honors Federated Identity Provider Sessions setting. For more information, see Citrix Knowledge Center article CTX253779.

You no longer need to use the Store authentication tokens policy to force the login prompt.

Support for non-English-language Input Method Editors (IME) keyboard layouts

Support for non-English language IME keyboard layouts continues to work uninterrupted after the Carbon APIs are deprecated with the Cocoa APIs.

Improved virtual apps and desktops launch experience [Technical Preview]

Starting with 2301 release, the opening of Citrix resources has been enhanced to be more intuitive, informative, and user friendly.

The launch progress notification now appears at the bottom-right corner of your screen. A progress status of the resources, which are in the process of being opened is shown. You cannot retrieve the notification once you dismiss it. The notification stays for a few seconds from the time you start the session. If the session fails to start, then the notification shows the failure message.

Note:

This feature is available for both Workspace (cloud) and storefront sessions.

You can provide feedback for this technical preview by using the Podio form.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give them an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix may or may not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds not be deployed in production environments.

Log collection

Log collection simplifies the process of collecting logs for Citrix Workspace app. The logs help Citrix to troubleshoot, and, in cases of complicated issues, facilitate support. Users can now collect logs quickly by using the new option provided in the Help menu by navigating to Help and selecting the Logging… or Email Log Files option. This feature improves the user experience during the log collection process.

• Logging… - clicking this option directs you to Preferences > Advanced > Logging
• Email Log Files – clicking this option allows collecting the latest logs.

Support synchronization for more keyboard layouts

Starting with the 2304 release, Citrix Workspace app for Mac supports keyboard layout synchronization for the following layouts or Input Method Editors (IMEs):

• English ABC
• English ABC - India
• Chinese, Traditional: Zhuyin - Traditional
• Chinese, Traditional: Sucheng - Traditional
• Google Japanese IME
• Sougou Chinese IME

Improved auto-update experience

The auto-update feature automatically updates the Citrix Workspace app to the latest version without the need for any user intervention.

Citrix Workspace app periodically checks and downloads the latest available version of the app. Citrix Workspace app determines the best time to install based on user activity not to cause any disruptions.

Opened apps appear in the dock with native app icons

Previously, clicking virtual apps in the Citrix Workspace app triggered the Citrix Viewer where these apps would be available. If you open many apps, the apps or its instances are opened in the Citrix Viewer. You can view the open apps by right-clicking the Citrix Viewer icon.

Starting with this release, when you open virtual apps, they appear in the Dock (bottom-right corner of the screen) with their respective icons and are easily identifiable. You can then access the virtual app from the dock itself. If you open multiple instances of an app, these instances are not duplicates in the Dock but are grouped within one instance in the Dock.

Improved Mission Control and App Expose experience

Previously, using the Mission Control or App Expose feature in a virtual app session resulted in the overlapping of many windows that were opened.

Starting with this release, when you use the Mission Control or App Expose feature in a virtual app session and open many windows, the windows do not overlap, and you can easily choose from among them.

Limiting video resolutions

Administrators who have users on lower‑performance client endpoints can choose to limit incoming or outgoing video resolutions to decrease the impacts of encoding and decoding video on those endpoints. Starting from Citrix Workspace app 2304 for Mac, you can limit these resolutions using client configuration options.

Note:

Users running with restricted resolutions impact the overall video quality of the conference because the Microsoft Teams server will be forced to use the lowest‑common‑denominator resolution for all conference participants.

Call constraints are disabled by default on the client with Citrix Workspace app 2304. To enable, administrators must set the following client‑side configurations with the defaults command:

defaults write com.citrix.HdxRtcEngine <Name> -<Type> <Value>

Support for horizontal scroll

Previously, Citrix Workspace app for Mac supported only vertical scroll on a trackpad. Starting with 2305 release, a horizontal scroll is also supported.

Improved audio echo cancellation support

Citrix Workspace app supports echo cancellation in adaptive audio and legacy audio codecs. This feature is designed for real time audio use cases, and it improves the user experience. Citrix recommends using adaptive audio.

USB redirection

HDX USB device redirection enables redirection of USB devices to and from a user device. A user can connect a flash drive to a local computer and access it remotely from a virtual desktop or a desktop hosted application.

During a session, users can plug and play devices, including Picture Transfer Protocol (PTP) devices. For example:

• Digital cameras, Media Transfer Protocol (MTP) devices such as digital audio players or portable media players

• Point-of-sale (POS) devices, and other devices such as 3D Space Mice, Scanners, Signature Pads and so on.

Note:

Double-hop USB is not supported for desktop hosted application sessions.

USB redirection is available for the following:

• Windows
• Linux
• Mac

By default, USB redirection is allowed for certain classes of USB devices, and denied for others. To restrict the types of USB devices made available to a virtual desktop, update the list of USB devices supported for redirection. More information is provided later in this section.

Tip

Where security separation between the user device and server is needed, ensure that you inform users about the types of USB devices to avoid.

Optimized virtual channels are available to redirect most popular USB devices, and provide superior performance and bandwidth efficiency over a WAN. Optimized virtual channels are usually the best option, especially in high latency environments.

Note:

For USB redirection purposes, Citrix Workspace app for Mac handles a SMART board the same as a mouse.

The product supports optimized virtual channels with USB 3.0 devices and USB 3.0 ports. For example, a CDM virtual channel is used to view files on a camera or to provide audio to a headset. The product also supports Generic USB Redirection of USB 3.0 devices connected to a USB 2.0 port.

Some advanced device-specific features, such as Human Interface Device (HID) buttons on a webcam, might not work as expected with the optimized virtual channel. Use the Generic USB virtual channel as an alternative.

Certain devices are not redirected by default, and are only available to the local session. For example, it would not be appropriate to redirect a NIC that is directly attached via internal USB.

To use USB redirection:

1. Connect the USB device to the device where Citrix Workspace app for Mac is installed.

2. You are prompted to select the available USB devices on your local system.

   

3. Select the device you want to connect and click Connect. If the connection fails, an error message appears.

4. In the Preferences window Devices tab, the connected USB device is listed in the USB panel:

   

5. Select the type of virtual channel (Generic or Optimized) for the USB device.

6. A message is displayed. Click to connect the USB device to your session:

   

Use and remove USB devices

Users can connect a USB device before or after starting a virtual session. When using Citrix Workspace app for Mac, the following apply:

• Devices connected after a session starts immediately appear in the USB menu of the Desktop Viewer.
• If a USB device is not redirecting properly, sometimes you can resolve the problem by waiting to connect the device until after the virtual session has started.
• To avoid data loss, use the Windows Safe removal menu before removing the USB device.

Supported USB devices

With Apple announcing the deprecation of Kernel Extensions (KEXT), Citrix Workspace app for Mac migrated to the new user mode USB framework IOUSBHost provided by Apple. This article lists the supported USB devices.

USB devices that are compatible with USB redirection

The following USB devices work seamlessly with USB redirection:

• 3DConnexion SpaceMouse

• Mass Storage Devices

• Kingston DataTraveler USB Flash Drive

• Seagate external HDD

• Kingston/Transcend Flash drive 32 GB/64 GB

• NIST PIV smartcard /reader

• YubiKey

USB devices that fail with USB redirection

The following device is not compatible with USB redirection:

• Transcend SSD external Hard disk

Unverified USB Devices

There are plenty of devices, unverified by Citrix, for successful USB redirection with Citrix Workspace app for Mac. Here are some of these devices:

• Other Hard Disks

• Special Keys on the keyboard and headsets that use custom HID protocol

Support for Mass Storage devices

We have seen that not all types of Mass Storage devices can be redirected successfully. For the devices which fail to redirect, there is an optimized virtual channel called Client Drive mapping. Using the Client Drive mapping, access to the mass storage devices can be controlled through the policies on the delivery controller.

Support for Isochronous devices

Generic USB redirection doesn’t support Isochronous class of USB devices in Citrix Workspace app for Mac. Isochronous mode of data transfer in a USB specification indicates devices that stream the timestamped data at a constant rate. For example: WebCams, USB Headphones, and so on

Support for Composite devices

A USB composite device is a single gadget that can perform more than one function. For example: multi-function printers, iPhone, and so on. Currently, Citrix Workspace app for Mac does not support redirection of composite devices to the Citrix Virtual Apps and Desktops and Citrix DaaS session.

Alternatives for unsupported USB devices

There are optimized virtual channels that can handle devices that are not supported with generic USB redirection. These virtual channels are optimized for speed when compared to generic USB redirection. Some examples are as follows:

• Webcam redirection: Optimized for raw webcam traffic. Microsoft Teams Optimization Pack has its own method of webcam redirection. Hence, it does not fall under the Webcam redirection virtual channel.

• Audio redirection: Optimized to transfer Audio streams.

• Client Drive Mapping: Optimized for redirecting mass storage devices to the Citrix Virtual Apps and Desktops and Citrix DaaS (formerly Citrix Virtual Apps and Desktops service) session. For example: Flash Drives, Hard Disks, DVD ROM/RW, and so on.

Enlightened Data Transport (EDT)

By default, EDT is enabled in Citrix Workspace app for Mac.

Citrix Workspace app for Mac reads the EDT settings as set in the default.ica file and applies it accordingly.

To disable EDT, run the following command in a terminal:

defaults write com.citrix.receiver.nomas HDXOverUDPAllowed -bool NO

Session reliability and auto client reconnect

Session reliability keeps sessions active and on the user’s screen when network connectivity is interrupted. Users continue to see the application that they are using until network connectivity resumes.

With session reliability, the session remains active on the server. To indicate that connectivity is lost, the user’s display freezes until connectivity resumes on the other side of the tunnel. Session reliability reconnects users without reauthentication prompts.

Important

• Citrix Workspace app for Mac users cannot override the server setting.
• With Session reliability enabled, the default port used for session communication switches from 1494 to 2598.

You can use session reliability with Transport Layer Security (TLS).

Note:

TLS encrypts only the data sent between the user device and Citrix Gateway.

Using session reliability policies

The session reliability connections policy setting allows or prevents session reliability.

The session reliability timeout policy setting has a default of 180 seconds, or three minutes. Though you can extend the time the session reliability keeps a session open, this feature is convenient to the user. Therefore, it does not prompt the user for reauthentication.

Tip

Extending session reliability timeouts might cause a user to get distracted and walk away from the device, leaving the session accessible to unauthorized users.

By default, incoming session reliability connections use port 2598, unless you change the port number in the session reliability port number policy setting.

You can configure the Auto client reconnect authentication policy setting to prompt users to reauthenticate when reconnecting to interrupted sessions.

If you use both session reliability and auto client reconnect, the two features work in sequence. Session reliability closes, or disconnects, the user session after the amount of time you specify in the Session reliability timeout policy setting. After that, the auto client reconnect policy settings take effect, attempting to reconnect the user to the disconnected session.

Note:

Session reliability is enabled by default at the server. To disable this feature, configure the policy managed by the server.

Configuring session reliability from Citrix Studio

By default, session reliability is enabled.

To disable session reliability:

1. Launch Citrix Studio.
2. Open the Session Reliability connections policy. . Set the policy to Prohibited.

Configuring session reliability timeout

By default, the session reliability timeout is set to 180 seconds.

Note:

Session reliability timeout policy can be configured only with XenApp and XenDesktop 7.11 and later.

To modify session reliability timeout:

1. Launch Citrix Studio.
2. Open the Session reliability timeout policy.
3. Edit the timeout value.
4. Click OK.

Configuring auto client reconnection using Citrix Studio

By default, auto client reconnection is enabled.

To disable auto client reconnection:

1. Launch Citrix Studio.
2. Open the Auto client reconnect policy.
3. Set the policy to Prohibited.

Configuring Auto client reconnection timeout

By default, the Auto client reconnection timeout is set to 120 seconds.

Note:

Auto client reconnect timeout policy can be configured only with XenApp and XenDesktop 7.11 and later.

To modify auto client, reconnect timeout:

1. Launch Citrix Studio.
2. Open the Auto client reconnect policy.
3. Edit the timeout value.
4. Click OK.

Limitations:

On a Terminal Server VDA, Citrix Workspace app for Mac uses 120 seconds as timeout value irrespective of the user settings.

Configuring the Reconnect user interface Transparency

The Session User Interface is displayed during a session reliability and auto client reconnect attempts. The Transparency level of the user interface can be modified using Studio policy.

By default, Reconnect UI Transparency is set to 80%.

To modify Reconnect user interface Transparency level:

1. Launch Citrix Studio.
2. Open the Reconnect UI Transparency level policy.
3. Edit the value.
4. Click OK.

Auto client reconnect and session reliability interaction

There are mobility challenges associated with switching between various access points, network disruptions, and display timeouts related to latency. These create challenging environments when trying to maintain link integrity for active Citrix Workspace app for Mac sessions. Citrix enhanced session reliability and auto reconnection technologies resolve this issue.

This feature, allows users to reconnect to sessions automatically after recovery from network disruptions. These features, enabled by policies in Citrix Studio, can be used to improve the user experience.

Note:

Auto client reconnection and session reliability timeout values can be modified using the default.ica file in StoreFront.

Auto client reconnection

Auto client reconnection can be enabled or disabled using Citrix Studio policies. By default, this feature is enabled. For information about modifying this policy, see auto client reconnection section earlier in this article.

Use the default.ica file in StoreFront to modify the connection timeout for AutoClienreconnect. By default, this timeout is set to 120 seconds (or two minutes).

Session reliability

Session reliability can be enabled or disabled using Citrix Studio policies. By default, this feature is enabled.

Use the default.ica file in StoreFront to modify the connection timeout for session reliability. By default, this timeout is set to 180 seconds (or three minutes).

How auto client reconnection and session reliability work

When auto client reconnection and session reliability are enabled for a Citrix Workspace app for Mac, consider the following:

• A session window is grayed out when a reconnection is in progress. A countdown timer displays the amount of time remaining before the session is reconnected. Once a session is timed out, it is disconnected.

By default, the reconnect countdown notification starts at 5 minutes. This timer value represents the combined default values for each of the timers (auto client reconnection and session reliability), 2 and 3 minutes respectively. The following image illustrates the countdown notification which appears in the upper right portion of the session interface:

Tip

You can alter the grayscale brightness used for an inactive session using a command prompt. For example, defaults write com.citrix.receiver.nomas NetDisruptBrightness 80. By default, this value is set to 80. The maximum value cannot exceed 100 (indicates a transparent window) and the minimum value can be set to 0 (a fully blacked out screen).

• Users are notified when a session successfully reconnects (or when a session is disconnected). This notification appears in the upper right portion of the session interface:

• A session window which is under auto client reconnect and session reliability control provides an informational message indicating the state of the session connection. Click Cancel Reconnection to move back to an active session.

Background blurring and replacement for Citrix Optimized Teams

Citrix Optimized Teams in Citrix Workspace app for Mac now supports background blurring and background replacement. You can use this by selecting More > Apply Background Effects when you are in a meeting or a P2P call.

Enhanced notch screen support

Starting with 2301 release, Citrix Workspace app for Mac supports Macs with a notch display. Macs support native notch screen in full screen mode for retina and multi-monitor displays. The area of the session in notch screen is now much bigger and provides the customers with more screen space. This enhancement also supports high DPI scaling. The mouse position also appears accurate in all the external monitors connected.

Note:

Ensure not to select the Scale to fit below built-in camera option in the Citrix Viewer. This option is not selected by default and can be found only on Macs with notch display.

Enhanced menu bar support

Starting with 2301 release, the CWA fully supports the Automatically hide and show the menu bar in full screen option in MacOS. For versions earlier than macOS 13, you must navigate to System Preferences > Dock & Menu Bar and uncheck the Automatically hide and show the menu bar in full screen option. For macOS 13 and later versions, you must navigate to System Preferences > Desktop & Dock and uncheck the Automatically hide and show the menu bar in full screen option. You have the provision to either enable or disable this option. This enhancement also supports high DPI scaling. The mouse position also appears accurate in all the external monitors connected.

The figure below illustrates a window where the menu bar is hidden

The figure below illustrates a window where the menu bar appears

Enhancement to sleep mode for optimized Microsoft Teams call

Previously, when you are in an optimized Microsoft Teams meeting, if there is no mouse or keyboard interaction, Citrix Workspace app or the optimized Microsoft Teams screen might go to sleep mode.

Starting with release 2305, Citrix Workspace app or the optimized Microsoft Teams screen doesn’t go to sleep mode even if there is no mouse or keyboard interaction during an optimized Microsoft Teams meeting.

Support for continuity camera

With the Continuity Camera, you can now use iPhone as your webcam. For a seamless connection, mount your iPhone such that its camera is available to the Mac device. You must select Webcam > Automatic Camera Selection for the iPhone to appear automatically on the Mac device as an external camera. You can switch to any other camera manually, for example by selecting Webcam > FaceTime HD Camera. The Continuity Camera works wired or wirelessly and provides a high-quality image.

Prerequisites

• This feature is supported on a Mac device running macOS version 13.
• This feature is supported on an iOS device running iOS version 16.
• You must be signed into the same Apple account in the Citrix Workspace app on both your iOS device and Mac device.
• For a wired connection, the iPhone must be connected to the Mac device through a USB.
• For a wireless connection, the iPhone and Mac devices must be in proximity and have Bluetooth and Wi-Fi turned on.

Some of the advantages are:

• Center Stage - Keeps the image within the frame as you move around.
• Portrait mode - Blurs the background of the image.
• Studio Light - Provides a bright effect on the image. It dims the background and illuminates the image.
• Desk View – The iPhone splits the Ultra Wide camera feed into two. It shows the desk and face both at the same time.
• Share Windows - The iPhone splits the Ultra Wide camera feed into two. It shows the desk and face both at the same time. The share windows function available in the video conferencing apps can be used to share the Desk View feed.

Customer Experience Improvement Program (CEIP)

Additional Information

Citrix handles your data in accordance with the terms of your contract with Citrix. Your data is protected, according to Citrix Services Security Exhibit available at the Citrix Trust Center.

Citrix uses Google Analytics to collect certain data from Citrix Workspace app as part of CEIP. Review how Google handles data collected for Google Analytics.

To disable sending CEIP data to Citrix and Google Analytics, perform the following steps:

1. In the Preferences window, select Security and Privacy.
2. Select the Privacy tab.
3. Select No, Thanks to disable CEIP or to forego participation.
4. Click OK.

Alternatively, you can disable CEIP by running the terminal command:

defaults write com.citrix.receiver.nomas "CEIPEnabled" -bool NO

Note:

No data is collected for the users in European Union (EU), European Economic Area (EEA), Switzerland, and United Kingdom (UK).

The specific data elements collected by Google Analytics are:

Note:

• Citrix Enterprise Browser was formerly known as Citrix Workspcace Browser.

Application delivery

When delivering applications with Citrix Virtual Apps and Desktops and Citrix DaaS, consider the following options to enhance the experience for your users when they access their applications:

Web access mode

Without any configuration, Citrix Workspace app for Mac provides web access mode: browser-based access to applications and desktops. Users simply open a browser to a Workspace for Web and select and use the applications that they want. In web access mode, no app shortcuts are placed in the App Folder on your user’s device.

Self-service mode

Add a StoreFront account to Citrix Workspace app for Mac or configure Citrix Workspace app for Mac to point to a StoreFront site. Then, you can configure self-service mode, which enables your users to subscribe to applications through Citrix Workspace app for Mac. This enhanced user experience is similar to that of a mobile app store. In self-service mode you can configure mandatory, auto-provisioned, and featured app keyword settings as needed. When one of your users selects an application, a shortcut to that application is placed in the App Folder on the user device.

When they access a StoreFront 3.0 site, your users see the Citrix Workspace app for Mac preview.

When publishing applications on your Citrix Virtual Apps farms, you can enhance the experience for users accessing those applications through StoreFront stores. Ensure that you include meaningful descriptions for the published apps. The descriptions are visible to your users through Citrix Workspace app for Mac.

Configure self-service mode

As mentioned previously, you can add a StoreFront account to Citrix Workspace app for Mac or configure Citrix Workspace app for Mac to point to a StoreFront site. Thus, you can configure the self-service mode, which allows users to subscribe to applications from the Citrix Workspace app for Mac user interface. This enhanced user experience is similar to that of a mobile app store.

In self-service mode, you can configure mandatory, auto-provisioned, and featured app keyword settings as needed.

• Automatically subscribe all users of a store to an app by appending the string **KEYWORDS:Auto** to the description, while publishing the app in Citrix Virtual Apps. When users log in to the store, the app is automatically provisioned without the need for manual subscription to the app.
• Advertise applications to users or make commonly used applications easier to find by listing them in the Citrix Workspace app for Mac Featured list. To list apps in the Mac Featured list, append the string **KEYWORDS:Featured** to the app description.

For more information, see StoreFront documentation.

Support for high DPI

You can now enable and match the client DPI scale settings by launching the session toolbar and navigating to Preferences > General > High DPI. The High DPI option is disabled by default.

Citrix Workspace Updates

Configuring using the GUI

An individual user can override the Citrix Workspace Updates setting using the Preferences dialog. This process is a per-user configuration and the settings apply only to the current user.

1. Go to the Preferences dialog in Citrix Workspace app for Mac.

2. In the Advanced pane, click Updates. The Citrix Workspace Updates dialog appears.

3. Select one of the following options:

   • Yes, notify me
   • No, don’t notify me
   • Use administrator specified settings

4. Close the dialog box to save the changes.

Configuring Citrix Workspace Updates using StoreFront

Administrators can configure Citrix Workspace Updates using StoreFront. Citrix Workspace app for Mac only uses this configuration for users who have selected “Use administrator specified settings.” To manually configure it, follow these steps.

1. Use a text editor to open the web.config file. The default location is C:\inetpub\wwwroot\Citrix\Roaming\web.config

2. Locate the user account element in the file (Store is the account name of your deployment)

   For example: <account id=… name=”Store”>

   Before the </account> tag, navigate to the properties of that user account:

   <properties>

   <clear /> </properties>

3. Add the auto-update tag after <clear /> tag.

auto-update-Check

The auto-update check determines that Citrix Workspace app for Mac can detect if updates are available.

Valid values:

• Auto – Is used to get notifications when updates are available.
• Manual – Is used to not get any notification when updates are available. Users must check manually for updates by selecting Check for Updates.
• Disabled – Is used to disable Citrix Workspace Updates.

auto-update-DeferUpdate-Count

Determines the number of times the user is notified to upgrade before forcibly updating to the latest version of Citrix Workspace app for Mac. By default, this value is 7.

Valid values:

• -1 – The user gets reminded later when an update is available.
• 0 – Force-updates the user to the latest version of Citrix Workspace app for Mac when the update is available.
• Positive integer – The user is reminded these many times before being forced to update. Citrix recommends not to set this value higher than 7.

auto-update-Rollout-Priority

Determines how quickly a device sees that an update is available.

Valid values:

• Auto – The Citrix Workspace Updates system decides when available updates roll out to users.
• Fast – Available updates roll out to users on high priority as determined by Citrix Workspace app for Mac.
• Medium – Available updates roll out to users on medium priority as determined by Citrix Workspace app for Mac.
• Slow – Available updates roll out to users on low priority as determined by Citrix Workspace app for Mac.

Keyboard layout synchronization

Keyboard layout synchronization enables you to switch between the preferred keyboard layouts on the client device. This feature is disabled by default. After you enable this feature, the client keyboard layout automatically synchronizes to the virtual apps and desktops.

To enable keyboard layout synchronization, go to Preferences > Keyboard and select “Use local keyboard layout, rather than the remote server keyboard layout.”

Note:

1. Using the local keyboard layout option activates the client IME (Input Method Editor). Users working in Japanese, Chinese, or Korean can use the server IME. They must disable the local keyboard layout option by clearing the option in Preferences > Keyboard. The session will revert to the keyboard layout provided by the remote server when they connect to the next session.
2. The feature works in the session only when the toggle in the client is turned on and the corresponding feature enabled on the VDA. A menu item,”Use Client Keyboard Layout,” in Devices > Keyboard > International is added to show the enabled state.

Starting with version 2210, Citrix Workspace app for Mac supports three different keyboard layout synchronization modes:

• Sync only once - when session starts – Based on the CTXIME value in the Config file, the client keyboard layout is synchronized to the server when the session launches. Any changes you make to the client keyboard layout during the session do not take effect immediately. To apply the changes, sign out and sign in to the app. The Sync only once - when session starts mode is the default keyboard layout for the Citrix Workspace app on Mac.

• Allow dynamic sync - This option synchronizes the client keyboard layout to the server when you change the client keyboard layout.

• Don’t sync - Indicates that the client uses the keyboard layout present on the server.

Prerequisites

• Enable the Unicode Keyboard Layout Mapping feature on the Windows VDA. For more information, see Knowledge Center article CTX226335.

• Enable the Dynamic Keyboard layout sync feature on the Linux VDA. For more information, see Dynamic keyboard layout synchronization.

• When using Windows Server 2016 or Windows Server 2019, navigate to HKEY_LOCAL_MACHINE\Software\Citrix\ICA\IcaIme registry path and add a DWORD value with key name DisableKeyboardSync and set the value to 0.

Configure keyboard layout

Citrix Workspace app for Mac provides UI to configure the three different keyboard layout synchronization modes.

To configure keyboard layout synchronization using the GUI:

1. From the Citrix Workspace app icon in the menu bar, click the account icon in the top-right corner and navigate to Preferences > Keyboard.

   The Keyboard layout synchronization settings appear.

2. Select from one of the following options:

   • Sync only once - when session starts - Indicates that the keyboard layout is synced to the VDA only once at the session launch. Unicode keyboard input mode is the recommended option for the Sync only once – when session starts
   • Allow dynamic sync - Indicates that the keyboard layout is synced dynamically to the VDA when the client keyboard is changed in a session. Unicode keyboard input mode is the recommended option for the Allow dynamic sync mode.
   • Don’t sync - Indicates that the client uses the keyboard layout present on the server, irrespective of the keyboard layout that is selected in the client. Scancode keyboard input mode is the recommended option for the Don’t sync You must make sure that the client keyboard layout is the same as the keyboard layout on the VDA if you select Unicode for the Don’t Sync option.

Limitations

• Using the keyboard layouts listed in “Supported Keyboard Layouts in Mac” works while using this feature. When you change the client keyboard layout to a non-compatible layout, the layout might be synced on the VDA side, but functionality cannot be confirmed.

• Remote apps that run with elevated privileges can’t be synchronized with the client keyboard layout. To work around this issue, manually change the keyboard layout on the VDA or disable UAC.

• When a user is working within an RDP session, it’s not possible to change the keyboard layout using the Alt + Shift shortcuts when RDP is deployed as an app. As a workaround, users can use the language bar in the RDP session to switch the keyboard layout.

Keyboard layout support for Windows VDA

Keyboard layout support for Linux VDA, Swiss French

By default, the keyboard layout synchronization feature is turned on. To control this feature alone, open the Config file in the ~/Library/Application Support/Citrix Receiver/ folder, locate the “EnableIMEEnhancement” setting and turn the feature on or off by setting the value to “true” or “false,” respectively.

Note:

The setting change takes effect after restarting the session.

Keyboard input mode enhancements

Citrix Workspace app for Mac provides UI to configure the keyboard input mode.

To configure keyboard input mode by using the GUI, do the following:

1. From the Citrix Workspace app icon in the menu bar, click the account icon in the top-right corner and navigate to Preferences > Keyboard.

   The Keyboard input mode settings appear

2. Select from one of the following options:

   • Scancode – Sends the key position from client-side keyboard to VDA and VDA generates the corresponding character. Applies server-side keyboard layout.
   • Unicode - Sends the key from the client-side keyboard to VDA and VDA generates the same character in VDA. Applies client-side keyboard layout.

This enhancement is enabled by default.

For example, consider a scenario where you’re using a US international keyboard layout and the VDA is using the Russian keyboard layout. When you choose Scancode and type the key next to Caps Lock, the scancode “1E” is sent to the VDA. The VDA then uses “1E” to display the character “ф”. If you choose Unicode and type the key next to Caps Lock, the character “a” is sent to the VDA. So, even if the VDA uses the Russian keyboard layout, the character “a” appears on the screen.

Citrix recommends the following keyboard input mode for the different keyboard layout sync options:

• Scancode mode for Don’t Sync option.

• Unicode mode for Allow dynamic sync and Sync only once - when session starts

Note:

The keyboard configuration changes take effect once you reconnect to the application.

You can change the configuration of Keyboard input mode in the Citrix Workspace app UI. However, for best performance, use the Citrix-recommended modes for different scenarios, physical keyboards, and client devices.

Language bar

You can choose to show or hide the remote language bar in an application session using the GUI. The language bar displays the preferred input language in a session. In earlier releases, you might change this setting using only the registry keys on the VDA. Starting with Citrix Workspace for Mac version 1808, you can change the settings using the Preferences dialog. The language bar appears in a session by default.

Note:

This feature is available in sessions running on VDA 7.17 and later.

Configure showing or hiding the remote language bar

1. Open Preferences.
2. Click Keyboard.
3. Click or unclick Show the remote language bar for the published applications.

Note:

The setting changes take effect immediately. You can change the settings in an active session. The remote language bar does not appear in a session if there is only one input language.

Citrix Casting

Citrix Casting is used to cast your Mac screen to nearby Citrix Ready workspace hub devices. Citrix Workspace app for Mac supports Citrix Casting to mirror your Mac screen to workspace hub connected monitors.

For more information, see Citrix Ready workspace hub documentation.

Prerequisites

• Latest supported version of Citrix Workspace app.
• Bluetooth enabled on the device for hub discovery.
• Both Citrix Ready workspace hub and Citrix Workspace app must be on the same network.
• Ensure Port 55555 isn’t blocked between the device running Citrix Workspace app and the Citrix Ready workspace hub.
• Port 55556 is the default port for SSL connections between mobile devices and the Citrix Ready workspace hub. You can configure a different SSL port on the Raspberry Pi’s settings page. If the SSL port is blocked, users cannot establish SSL connections to the workspace hub.
• For Citrix Casting, ensure port 1494 isn’t blocked.

Enable Citrix Casting

Citrix Casting is disabled by default. To enable Citrix Casting using Citrix Workspace app for Mac:

1. Go to Preferences.
2. Select Advanced in the panel and then choose Citrix Casting.
3. Select Yes, enable casting.

A notification appears when Citrix Casting is launched and a Citrix Casting icon appears in the menu bar.

Note:

After enabling, Citrix Casting launches with Citrix Workspace app for Mac automatically every time until you disable it by selecting No, don’t enable casting in Preferences > Advanced > Citrix Casting.

Discover workspace hub devices automatically

To connect to workspace hubs automatically:

1. On your Mac, sign in to Citrix Workspace app and ensure that Bluetooth is turned on. Bluetooth is used to discover nearby workspace hubs.
2. Select the Citrix Casting icon in the menu bar. All Citrix Casting functions are operated through this menu.
3. The Hub List submenu shows all nearby workspace hubs on the same network. Hubs are listed in descending order by their proximity to your Mac and display their workspace hub configured names. All automatically discovered hubs display under Nearby Hubs.
4. Choose the hub you want to connect to by selecting its name.

To cancel selection of a workspace hub during connection, select Cancel. You can also use Cancel if the network connection is poor and connecting is taking longer than usual.

Note:

Occasionally, your chosen hub might not appear in the menu. Check the Hub List menu again after a few moments or add your hub manually. Citrix Casting receives the workspace hub’s broadcasting periodically.

Discover workspace hub devices manually

If you cannot find the Citrix Ready workspace hub device in the Hub List menu, add the workspace hub’s IP address to access it manually. To add a workspace hub:

1. On your Mac, sign in to Citrix Workspace app and ensure that Bluetooth is turned on. Bluetooth is used to discover nearby workspace hubs.
2. Select the Citrix Casting icon in the menu bar.
3. Select Manage in the menu. The Manage hubs window appears.
4. Click Add new to enter the IP address of your hub.
5. After successfully adding the device, the Hub name column displays the hub’s friendly name. Use this name to identify the hub in the Manual section of the Hub List submenu.

Note:

Currently, only Mirror mode is supported. Mirror is the only available choice in the Display Mode column.

Disconnect the workspace hub device

You can disconnect your current session and exit the Citrix Ready workspace hub automatically or manually.

• To disconnect the screen casting session automatically, close your laptop.

• To disconnect the screen casting session manually:

1. Select the Citrix Casting icon.
2. In the list of hubs, select the name of your workspace hub. The Disconnect option appears to the right.
3. Select Disconnect to exit the hub.

Known issues

• There are small latency issues when viewing the mirrored screen. In poor network conditions, latency might be even longer.

• When SSL is enabled in a Citrix Ready workspace hub and the hub’s certificate is not trusted, an alert window appears. To solve the issue, add the certificate to your trusted certificate list with the Keychain tool.

Client-side microphone input

Citrix Workspace app for Mac supports multiple client-side microphone inputs. Locally installed microphones can be used for:

• Live events, such as softphone calls and Web conferences.
• Hosted recording applications, such as dictation programs.
• Video and audio recordings.

Digital dictation support is available with Citrix Workspace app for Mac.

You can use microphones attached to your device by choosing one of the following options from the Mic & Webcam settings in Citrix Workspace app for Mac > Preferences:

• Use my microphone and webcam
• Don’t use my microphone and webcam
• Ask me each time

If you select Ask me each time, a dialog box appears each time you connect asking whether you want to use your microphone in that session.

Windows special keys

Citrix Workspace app for Mac provides several options and easier ways to substitute special keys such as function keys in Windows applications with Mac keys. Use the Keyboard tab to configure the options you want to use, as follows:

• “Send Control character using” lets you choose whether to send Command-character keystroke combinations as Ctrl+character key combinations in a session. Select “Command or Control” from the pop-up menu to send familiar Command-character or Ctrl-character keystroke combinations on the Mac as Ctrl+character key combinations to the PC. If you select Control, you must use Ctrl-character keystroke combinations.
• “Send Alt character using” lets you choose how to replicate the Alt key within a session. If you select Command-Option, you can send Command-Option and keystroke combinations as Alt+ key combinations within a session. Alternatively, if you select Command, you can use the Command key as the Alt key.
• “Send Windows logo key using Command (right)”. Lets you send the Windows logo key to your remote desktops and applications when you press the Command key on the right side of the keyboard. If this option is disabled, the right Command key has the same behavior as the left Command key according to the above two settings in the preferences panel. However, you can still send the Windows logo key using the Keyboard menu; choose Keyboard > Send Windows Shortcut > Start.
• “Send special keys unchanged” lets you disable the conversion of special keys. For example, the combination Option-1 (on the numeric keypad) is equivalent to the special key F1. You can change this behavior and set this special key to represent 1 (the number one on the keypad) in the session. To do this, select the “Send special keys unchanged” check box. By default, this check box is not selected so Option-1 is sent to the session as F1.

You send the function and other special keys to a session using the Keyboard menu.

If your keyboard includes a numeric keypad, you can also use the following keystrokes:

Windows shortcuts and key combinations

Remote sessions recognize most Mac keyboard combinations for text input, such as Option-G to input the copyright symbol ©. Some keystrokes you make during a session, however, do not appear on the remote application or desktop. The Mac operating system interprets them. This can result in keys triggering Mac responses instead.

You might also want to use certain Windows keys, such as Insert, that many Mac keyboards do not have. Similarly, some Windows 8 keyboard shortcuts display charms and app commands, and snap and switch apps. Mac keyboards do not mimic these shortcuts. However, these can be sent to the remote desktop or application using the Keyboard menu.

Keyboards and the ways keys are configured can differ widely between machines. Citrix Workspace app for Mac therefore offers several choices to ensure that keystrokes can be forwarded correctly to hosted applications and desktops. These keystrokes are listed in the table. The default behavior is described. If you adjust the defaults (using the Citrix Workspace app or other preferences), different keystroke combinations might be forwarded and other behavior might be observed on the Remote PC Access.

Important

Certain key combinations listed in the table are not available when using newer Mac keyboards. In most of these cases, keyboard input can be sent to the session using the Keyboard menu.

Conventions used in the table:

• Letter keys are capitalized and do not imply that the Shift key must be pressed simultaneously.
• Hyphens between keystrokes indicate that keys must be pressed together (for example, Control-C).
• Character keys create text input and include all letters, numbers, and punctuation marks. Special keys do not create input by themselves but act as modifiers or Controllers. Special keys include Control, Alt, Shift, Command, Option, arrow keys, and function keys.
• Menu instructions relate to the menus in the session.
• Depending on the configuration of the user device, some key combinations might not work as expected, and alternative combinations are listed.
• Fn refers to the Fn (Function) key on a Mac keyboard. Function key refers to F1 to F12 on either a PC or Mac keyboard.

Use Input Method Editors (IME) and international keyboard layouts

Citrix Workspace app for Mac allows you to use an Input Method Editor (IME) on either the user device or on the server.

When client-side IME is enabled, users can compose text at the insertion point rather than in a separate window.

Citrix Workspace app for Mac also allows users to specify the keyboard layout they want to use.

To enable client-side IME

1. From the Citrix Viewer menu bar, choose Keyboard > International > Use Client IME.
2. Ensure that the server-side IME is set to direct input or alphanumeric mode.
3. Use the Mac IME to compose text.

To indicate explicitly the starting point when composing text

• From the Citrix Viewer menu bar, choose Keyboard > International > Use Composing Mark.

To use server-side IME

• Ensure that the client-side IME is set to alphanumeric mode.

Mapped server-side IME input mode keys

Citrix Workspace app for Mac provides keyboard mappings for server-side Windows IME input mode keys that are not available on Mac keyboards. On Mac keyboards, the Option key is mapped to the following server-side IME input mode keys, depending on the server-side locale:

To use international keyboard layouts

• Ensure both client-side and server-side keyboard layouts are set to the same locale as the default server-side input language.

Multiple monitors

Users can set Citrix Workspace app for Mac to work in full-screen mode across multiple monitors.

1. Open the Citrix Viewer.
2. From the menu bar, click View and select one of the following options, based on your requirement:
   • Enter Full Screen - Full screen on the primary monitor only.
   • Use All Displays In Full Screen - Full screen on all connected monitors.
3. Drag the Citrix Virtual Desktops screen between the monitors.

The screen is now extended to all monitors.

Limitations

• Full-screen mode is only supported on one monitor or all monitors, which are configurable through a menu item.
• Citrix recommends using a maximum of 2 monitors. Using more than 2 monitors might degrade session performance or cause usability issues.
• Full screen mode is not available on Macs with a notch.

Desktop toolbar

Users can now access the Desktop Toolbar in both windowed and full-screen mode. Previously, the toolbar was only visible in full-screen mode. Other toolbar changes include:

• The Home button has been removed from the toolbar. This function can be run by using the following commands:
  • Cmd-Tab to switch to the previous active application.
  • Ctrl-Left Arrow to switch to the previous Space.
  • Using the built-in trackpad or Magic Mouse gestures to switch to a different Space.
  • Moving the cursor to the edge of screen while in full-screen mode displays a Dock where you can choose which applications to make active.
• The Windowed button has been removed from the toolbar. Follow one of these methods to switch from full-screen mode to windowed mode:
  • On OS X 10.10, click the green window button on the drop-down menu bar.
  • On OS X 10.9, click the blue menu button on the drop-down menu bar.
  • On all versions of OS X, select Exit Full Screen from the View menu of the drop-down menu bar.
• Support to drag between windows in full screen with multiple monitors.

Workspace Control

Workspace Control lets desktops and applications follow users as they move between devices. For example, clinicians in hospitals to move from workstation to workstation without having to restart their desktops and applications on each device.

Policies and client drive mappings change appropriately when you move to a new user device. Policies and mappings are applied according to the user device where you are currently logged on to the session. For example, a healthcare worker can sign out from a device in the emergency room and sign-in to a workstation in the X-ray laboratory. The policies, printer mappings, and client drive mappings appropriate for the session in the X-ray laboratory go into effect for the session in the X-ray laboratory.

To configure workspace Control settings

1. Click the down arrow icon in the Citrix Workspace app for Mac window and choose Preferences.
2. Click General tab.
3. Choose one of the following:
   • Reconnect apps when I start Citrix Workspace app. Allows users to reconnect to disconnected apps when they start Citrix Workspace app.
   • Reconnect apps when I start or refresh apps. Allows users to reconnect to disconnected apps either when they start apps or when they select Refresh Apps from the Citrix Workspace app for Mac menu.

Mapping client drives

Client drive mapping allows you to access local drives on the user device such as CD-ROM drives, DVDs, and USB memory sticks, during sessions. When a server configuration allows client drive mapping, users can access locally stored files and work on them during sessions. Users can also save them either on a local drive or on a drive on the server.

Citrix Workspace app for Mac monitors the directories in which hardware devices such as CD-ROMs, DVDs, and USB memory sticks are typically mounted on the user device and automatically maps any new ones that appear during a session to the next available drive letter on the server.

You can configure the level of read and write access for mapped drives using Citrix Workspace app for Mac preferences.

To configure read and write access for mapped drives

1. On the Citrix Workspace app for Mac home page, click the down arrow icon , and then click Preferences.
2. Click File Access.
3. Select the level of read and write access for mapped drives from the following options:
   • Read and Write
   • Read only
   • No access
   • Ask me each time
4. Log off from any open sessions and reconnect to apply the changes.

Custom web store

You can access your organization’s custom web store from the Citrix Workspace app for Mac. To use this feature, the admin must add the custom web store to the list of allowed URLs in the allowedWebStoreURLs property in the Global App Configuration Service.

For more information about configuring web store URLs for end-users, see Global App Configuration Service.

To add a custom web store URL, perform the following steps:

1. Open the Citrix Workspace app and navigate to Accounts.

2. In the Accounts window, click the + icon and type the URL.

To delete a custom web store URL, perform the following steps:

1. Open the Citrix Workspace app and navigate to Accounts.

2. In the Accounts window, select the account you want to delete and click the - icon.

Inactivity Timeout for Citrix Workspace app

The inactivity timeout feature logs you out of the Citrix Workspace app based on a value that the admin sets. Admins can specify the amount of idle time that is allowed before a user is automatically signed out of the Citrix Workspace app. You’re automatically signed out when no activity from the mouse, keyboard, or touch occurs for the specified interval of time, within the Citrix Workspace app window. The inactivity timeout does not affect the already running Citrix Virtual Apps and Desktops and Citrix DaaS sessions or the Citrix StoreFront stores.

The inactivity timeout value can be set starting from 1 minute to 1440 minutes. By default, the inactivity timeout isn’t configured. Admins can configure the inactivityTimeoutInMinutes property by using a PowerShell module. Click here to download the PowerShell modules for Citrix Workspace Configuration.

The end-user experience is as follows:

• A notification appears three minutes before you’re signed out, with an option to stay signed in, or sign out. The notification appears if you’ve enabled Citrix Workspace app notifications in the system preferences of your Mac.
• The notification appears only if the configured inactivity timeout value is greater than 5 minutes. For example, if the configured value is 6 minutes, a notification appears when 3 minutes of inactivity is detected. If the configured inactivity timeout value is less than or equal to 5 minutes, the user is signed out without a notification.
• Users can click Stay signed in to dismiss the notification and continue using the app, in which case the inactivity timer is reset to its configured value. You can also click Sign out to end the session for the current store.

StoreFront to Workspace migration

StoreFront to Workspace URL migration enables you to seamlessly migrate your end users from a StoreFront store to Workspace store with minimal user interaction.

Consider, all your end users have a StoreFront store storefront.com added to their Workspace app. As an administrator, you can configure a StoreFront URL to Workspace URL Mapping {‘storefront.com’:’xyz.cloud.com’} in the Global App Configuration Service. The Global App Config Service pushes the setting to all Citrix Workspace app instances, on both managed and unmanaged devices, that have the StoreFront URL storefront.com added.

Once the setting is detected, Citrix Workspace app adds the mapped Workspace URL xyz.cloud.com as another store. When the end user launches the Citrix Workspace app, the Citrix Workspace store opens. The previously added StoreFront store storefront.com remains added to the Citrix Workspace app. Users can always switch back to the StoreFront store storefront.com using the Switch Accounts option in the Citrix Workspace app. Admins can control the removal of the StoreFront store storefront.com from the Citrix Workspace app at the users’ end points. The removal can be done through the global app config service.

To enable the feature, do the following steps:

1. Configure StoreFront to Workspace mapping using the Global App Config Service. For more information on Global App config service, see Global App Configuration Service.

2. Edit the payload in the app config service:

   { "serviceURL": Unknown macro: \{ "url"}
   ,
   "settings":{
   "name":"Productivity Apps", [New Store Name]
   "description":"Provides access StoreFront to Workspace Migration",
   "useForAppConfig":true,
   "appSettings":
   { "macos":[ Unknown macro: \{ "category"}
   ]
   }
   }
   }
   <!--NeedCopy-->
   

   Note:

   If you’re configuring the payload for the first time, use POST. If you’re editing the existing payload configuration, use PUT and check that you have the payload that consists of all the supported settings.

3. Specify the StoreFront URL storefront.com as the value for URL in the serviceURL section.

4. Configure the Workspace URL xyz.cloud.com inside the section migrationUrl.

5. Use storeFrontValidUntil to set the timeline for the removal of the StoreFront store from the Citrix Workspace app. This field is optional. You can set the following value based on your requirement:

   • Valid date in the format (YYYY-MM-DD)

     Note:

     If you have provided a past date, then the StoreFront store is removed immediately upon URL migration. If you have provided a future date, then the StoreFront store is removed on the set date.

Once the app config service settings are pushed, the following screen appears:

When the user clicks Switch to Citrix Workspace now, the Workspace URL is added to Citrix Workspace app and the authentication prompt appears. Users have a limited option to delay the transition up to three times.

Microsoft Teams enhancement

Configuring a preferred network interface

You can now configure a preferred network interface for media traffic. Run the following command in a terminal:

defaults write com.citrix.HdxRtcEngine NetworkPreference -int <value>

Select one of the following values as required:

• 1: Ethernet
• 2: Wi-Fi
• 3: Cellular
• 4: Vpn
• 5: Loopback
• 6: Any

By default and if no value is set, the WebRTC media engine chooses the best available route.

Microsoft Teams

Encoder performance estimator

The HdxRtcEngine.exe is the WebRTC media engine embedded in Citrix Workspace app that handles Microsoft Teams redirection. The HdxRtcEngine.exe can estimate the best encoding resolution that the endpoint’s CPU can sustain without overloading. Possible values are 240p, 360p, 480p, 720p, and 1080p.

The performance estimation process uses macroblock code to determine the best resolution that can be achieved with the particular endpoint. The Codec negotiation includes the highest possible resolution. The Codec negotiation can be between the peers, or between the peer and the conference server.

There are four performance categories for endpoints that have its own maximum available resolution:

To set the video encoding resolution value, to, for example 360p, run the following command from the terminal:

defaults write com.citrix.HdxRtcEngine OverridePerformance -int 1

For more information about Microsoft Teams optimization, see Optimization for Microsoft Teams.

Printing

You can now use PDF universal printing when printing from a MAC. You no longer need to install the HP Color LaserJet 2800 Series PS driver when auto-creating printers with Universal Print Driver if you chose to use PDF Universal Printing.

PostScript Printing

By default, the auto-redirected client printers are created with the Citrix UPD with PostScript support. For more information, see support article CTX296662.

Ensure that the Client printer redirection, the Universal Print Driver Usage, and the Universal print driver priority policies are set to default. Also ensure that you’ve installed the HP Color LaserJet 2800 Series PS driver on the VDA. For more information about installing the driver, see support article CTX140208.

PDF Universal Printing

Prerequisites:

• Citrix Workspace app for Mac version 2112 or later - Enables consumption of PDF print streams for Citrix Workspace app for Mac.
• Citrix Virtual Apps and Desktops version 2112 or later - Enables PDF universal printing for auto-created client printers.
• Enable the Client printer redirection policy in the Citrix Studio or web console.

You can print via PDF once you configure either or both of the following options:

1. Provide a single PDF Universal Printer created in each session.
2. Use the UPD for regular auto-created printers.

Provide a single PDF Universal Printer created in each session

To enable creation of the PDF Universal Printer in sessions from a Mac client or any other PDF enabled client endpoint, go to Citrix Studio or the web console and enable the Auto-Create PDF universal printer policy.
Once the policy is enabled, the PDF universal printer is created in the session. The printer is called Citrix PDF Printer.

Using this printer in a session generates a PDF output that’s delivered to the client and handed to the default PDF handling application on the endpoint. For the macOS client, this is typically the built-in Preview application, but it could be any registered PDF handling application such as Adobe Acrobat Reader.

Use the UPD for regular auto-created printers

To enable PDF universal printing for all redirected client printers in a session from a Mac client, visit Citrix Studio or a web console and configure the Universal print driver priority policy to place the PDF metafile format in before PS within the priority list.

After you make this change, auto-created printers that use a universal driver with a PDF-capable Mac client uses the Citrix PDF Universal Driver instead of the HP Color LaserJet 2800 Series PS driver on the host. When using one of the auto-created printers in a session, PDF is used as the intermediate format of the print job; but the print output flows directly to the selected client-attached printer.