Citrix Workspace app for Mac 2411 - Preview

You can download Citrix Workspace app for Mac 2411 preview version from the Downloads page.

For information on installation, see Install page.

Note:

This is an Early Access Build shared for the purpose of testing or validation with the intent to make organizations ready for the upcoming release and is NOT advised to be deployed in production environments.

What’s new

• Enhancing Citrix security with pre-populated user name
• New configuration checker tool enhancements
• Enforcing Citrix access using Citrix Workspace app
• Version control using MDM
• Auto updates support scheduling
• Auto update enhancement for active users
• UCSDK HID Implementation
• Enhanced keyboard and IME diagnostics tool
• HDX Direct
• Support for plug and play webcam redirection
• Support for browser content redirection (Technical Preview)
• Enhanced display control with Multi-Monitor selector (Technical Preview)
• USB Redirection of mass storage devices (Technical Preview)
• HDX Direct V2 for non-shield scenario (Technical Preview)
• Enable Audio Quality Enhancer to improve audio performance (Technical Preview)

Enhancing Citrix security with pre-populated user name

Starting with version 2411, administrators can use Mobile Device Management (MDM) to push the user name in a specific format to manage devices. Citrix Workspace app reads this configuration, retrieves the user name, and pre-populates it within the authentication prompt, making it read-only. This ensures end-users can only sign in using the admin-pushed user name reducing the risk of unauthorized access. This feature enhances sign-in security and gives administrators greater control over authentication.

You can configure this feature through MDM using the following settings:

 <array>
    <dict>
        <key>LockUserName</key>
        <true/>
        <key>CitrixUserName</key>
        <string>UserNameValue</string>
    </dict>
 </array>

<!--NeedCopy-->

Limitations:

• This solution works only with on-premises stores that use basic authentication.
• It is not compatible with SAML (WebView) authentication.
• The scope is limited to the Citrix Workspace app and browser-based logins are not managed.

New configuration checker tool enhancements

Starting with version 2411, the configuration checker tool includes health checks for the Global App Configuration service (GACS) and Mobile Device Management (MDM) settings. It enhances diagnostics, user control, and reporting for configurations in the Citrix Workspace app. The following checks are included:

• Check if the GACS URLs are reachable.
• Verify if data can be retrieved from the endpoint for the customer’s domain (Email or URL discovery). If not, indicate that no settings are configured.
• Check if store settings can be fetched.
• Display the settings used by the Citrix Workspace app, if store settings are retrieved successfully.
• Check if MDM settings are overriding GACS settings.
• Highlight the differences between the settings fetched and settings applied by the Citrix Workspace app.
• Show the timestamp of the last fetched Citrix Workspace app config.json.
• Provide an option to save or export the health check report after it runs.
• Allow admins to analyze the report to review the settings and troubleshoot any issues.

This feature aims to improve the reliability and manageability of configurations within the Citrix Workspace app. You can access this from the Help menu of the Citrix Workspace app by navigating to Help > Check App Configuration, or by using the shortcut key Cmd + Shift + C.

Enforcing Citrix access using Citrix Workspace app

Starting with version 2411, admins can mandate users on Mac devices to access Citrix Workspace app exclusively through the native app. When this feature is enabled, users attempting to access the store URL and third-party browsers are automatically redirected to the Citrix Workspace app. This ensures they can take advantage of all the native app’s capabilities and enjoy a seamless user experience. Also, users connecting via a browser while invoking the HDX engine are prompted to add the store to the native client for future access. This feature also gives admins greater control over the user environment and enhances security by keeping the authentication process within the native app, eliminating the need to download ICA files.

Admins can enable this feature using their Citrix Cloud account. This feature is currently supported for Cloud stores only. For more information, see Mandate end users to authenticate and access apps and desktops through native app.

Version control using MDM

Starting with version 2411, administrators can configure Citrix Workspace version control and Client App Management using Mobile Device Management (MDM). This capability enables administrators to manage the automatic updates of the Citrix Workspace app on devices within their organization. Administrators can control the version by setting the range for maximumAllowedVersion and minimumAllowedVersion properties in the Global App Configuration service.

For more information, see Auto-update version control.

To enable authentication through MDM, use the following settings:

 <dict>
    <key>AutoUpdatePluginsSettings</key>
    <string>
        [
        {
          "pluginName": "Citrix Workspace",
          "pluginId": "D99C3E77-FBF5-4B97-8EDA-4E381A1E0826",
          "pluginSettings": {
            "deploymentMode": "InstallAndUpdate",
            "upgradeToLatest": false,
            "minimumAllowedVersion": "24.02.10.24",
            "maximumAllowedVersion": "24.02.10.24",
            "delayGroup": "Medium"
          }
        }
      ]
    </string>
 </dict>

<!--NeedCopy-->

Client App Management using MDM

Client App Management allows administrators to install and manage agents like Citrix EndPoint Analysis (EPA) and Zoom VDI plug-ins from a single console.

Client App Management for Zoom VDI auto-update plug-in

Administrators can control auto-update settings for Zoom VDI plug-ins on organization devices, ensuring seamless updates and enhanced security.

To configure Zoom VDI AutoUpdate plug-in management via MDM, use the following settings:

 <dict>
    <key>AutoUpdatePluginsSettings</key>
    <string>
    [
        {
            "pluginName": "Zoom VDI AutoUpgrade Plugin",
            "pluginId": "1A4BB471-022C-4C87-BDCD-0B64FB42869C",
            "pluginSettings": {
                "deploymentMode": "InstallAndUpdate",
                "upgradeToLatest": true,
                "ftu": true
            }
        }
    ]
    </string>
 </dict>

<!--NeedCopy-->

For more information, see Client App Management for Zoom VDI plug‑in.

Support for auto update scheduling

Starting with version 2411, admins can schedule auto-updates for the Citrix Workspace app during convenient hours. This capability allows them to determine the rollout period, minimizing disruption to end-users and improving adoption of the auto-update service, which was previously controlled by Citrix.

End-users receive auto-updates for the Citrix Workspace app at a time scheduled by their admins, ensuring updates happen in a planned manner. Admins can control updates on macOS in the following ways:

• Admins can set the dates and time range for updates of the Citrix Workspace app for macOS.
• Scheduled updates set by customer admins take precedence over any rollout periods defined in the Citrix Catalog.

You can configure this feature using Mobile Device Management (MDM). Configuration using Global App Configuration service (GACS) is available soon.

 <array>
  <dict>
   <key>AutoUpdateSchedulerSettings</key>
    <string> 
    {
                    "startTime":"20:30",
                    "endTime":"23:30",
                    "deferCount":"4"
    }              
    </string>
   <key>PayloadDisplayName</key>
    <string>Citrix Workspace #1</string>
   <key>PayloadIdentifier</key>
    <string>com.citrix.receiver.nomas</string>
   <key>PayloadType</key>
    <string>com.citrix.receiver.nomas</string>
   <key>PayloadUUID</key>
    <string>3BE38AD3-7D95-423F-BD7B-8A4D1F5208EF</string>
   <key>PayloadVersion</key>
   <integer>1</integer>
  </dict>
 </array>
 
<!--NeedCopy-->

Auto update enhancement for active users

Starting with version 2411 of Citrix Workspace app for Mac, the auto-update feature has been enhanced to trigger only for active users. This change aims to provide better control by ensuring that auto-update is available only for users with Global App Configuration service (GACS) or Mobile Device Management (MDM) policies, or who are actively using the app.

A user is considered active if any of the following criteria is met:

• The user is a managed user, with system and profile controlled and maintained by an IT administrator.
• The user has added a store with Global Application Configuration service (GACS) settings.
• The user has launched at least one session (Desktop, Citrix Virtual app, or SaaS app).

If none of these conditions are met, the user is considered inactive, and the auto-Update feature is not available. When a user transitions from inactive to active status, the application triggers the auto-Update feature, if applicable, ensuring the application is up-to-date.

Support for WebHID API in UCSDK

Starting with the 2411 version, Citrix Workspace app for Mac supports the WebHID API to redirect Human Interface Devices (HIDs) from endpoint to Unified Communication SDK application on the VDI. It complies with the HID standard for bi-directional communication between the application based on UCSDK and the HID devices connected to the endpoint.

With this feature, your UCSDK application can interpret HID commands such as call accept, reject, mute, or unmute within the HDX session for an enhanced user experience. This feature is enabled by default.

Enhanced keyboard and IME diagnostics tool

Starting with version 2411, a new self-service command-line tool hosted in Windows Virtual Delivery Agent (VDA) is supported by Citrix Workspace app for Mac to diagnose keyboard and Input Method Editor (IME) related issues. This tool meets various user requirements, provides platform versatility, and caters to personalized needs. The keyboard and IME functions depend on different configurations and capabilities in VDAs and Citrix Workspace apps. Incorrect settings in the VDA or client side might result in unexpected input behavior.

With this tool, you can easily identify issues that were previously difficult to find.

• Checks for consistency between VDA policy and client keyboard layout sync mode.
• Checks for client keyboard layout and VDA keyboard layout, and provides best practices.
• Checks the remote language bar setting and provides best practices.
• Checks system shortcut pass-through configurations, accessibility permissions, and full screen mode status to suggest best practices.

Prerequisites:

• Citrix Workspace app for Mac 2411 or higher.
• Virtual Delivery Agent 2411 or higher.

The command line tool is hosted in Windows VDA as CtxKbImeDiagnostics.exe. The interfaces are as follows:

HDX Direct

Starting with the 2411 version, Citrix Workspace app for Mac supports HDX Direct V1 transport for the connection between the Citrix Workspace app and the VDA server whenever possible. HDX Direct allows internal client devices to establish a secure direct connection with the session host when accessing Citrix-delivered resources. For more information, see HDX Direct.

Support for plug and play webcam redirection

Starting with the 2411 version, Citrix Workspace app for Mac supports plug and play (PnP) webcam redirection for Linux VDA and Windows VDA. With this feature, when you connect a built-in or external camera to your device, it is automatically detected in the virtual sessions. If you unplug a camera form the device, Citrix Workspace app for Mac can promptly detect the change and remove the disconnected cameras from your selection options in the virtual sessions.

Support for browser content redirection (Technical Preview)

Starting with the 2411 version, Citrix Workspace app for Mac supports the Browser Content Redirection (BCR) feature. Browser content redirection prevents the rendering of webpages in the allow list on the VDA side. This feature uses Citrix Workspace app to instantiate a corresponding rendering engine on the client side, which fetches the HTTP and HTTPS content from the URL. Note that it is supported for both ARM and Intel CPU architectures.

Browser content redirection supports the Google Chrome and Microsoft Edge browser on the VDA. Browser content redirection redirects the contents of a web browser to a client device, and creates a corresponding browser embedded within the Citrix Workspace app. This feature offloads network usage, page processing, and graphics appearing at the endpoint. Doing so improves the user experience when browsing demanding webpages, especially webpages that incorporate HTML5 or WebRTC video.

For more information, see Browser content redirection.

Configuration

Note:

The BCR for Mac package is independent of Citrix Workspace app for Mac. You can install and update the BCR package over any Citrix Workspace app for Mac version newer than 2409. The design allows you to get the latest BCR updates without needing to update Citrix Workspace app.

1. Download and install the BCR overlay package on the Mac client from the Downloads page. Note that the package is be listed under Additional Software on the Citrix Workspace app Downloads page.
2. Add the BCR extension to the browser on the VDA. For more information, see Browser content redirection Chrome extension and Browser content redirection Edge Chromium extension.
3. Launch the desktop session and play the HTML5 content.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.

Enhanced display control with Multi-Monitor selector (Technical Preview)

Starting with version 2411, the Multi-Monitor Selector (MMS) allows users to choose which displays to use in full-screen mode for desktop sessions only, not for seamless sessions. A new Multi-Monitor button has been added to the toolbar, which appears only when more than one screen is connected. This feature enhances the flexibility and usability of multi-monitor setups in desktop sessions, providing a more tailored and efficient user experience.

Prerequisites:

If the new toolbar is OFF, the Multi-Monitor Selector feature is also turned OFF.

To manage the Multi-Monitor selector feature, use the following commands:

The toolbar button includes three drop-down menu options for desktop sessions in full-screen mode:

• Extend to All Displays: The session switches to full-screen mode on all connected screens. The previous checkbox Use All Displays In Fullscreen mode in the menu bar is removed if this feature is enabled.

• Custom Layout: This option opens a custom monitor selector displaying the layout of the macOS system. Users can click the rectangles in the selector to choose which screens to use and then click Apply. The session then uses the selected screens in full-screen mode.

• Fullscreen: The session switches to full-screen mode on the current single display where the toolbar is located or where the button is clicked.

When a new monitor is plugged in, a notification appears for the user to make a selection. Users can check Remember my preference to mute this notification.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.

USB Redirection of mass storage devices (Technical Preview)

Starting with version 2411, USB redirection enables you to access USB mass storage devices connected to a local computer from your virtual apps and desktops, allowing you to use USB drives seamlessly within virtual sessions. This feature is enabled by default.

Note:

The system triggers a Disk Not Ejected Properly message for users. This is a controlled behavior, designed to gain control of the device when existing drivers do not respond to seize requests.

Prerequisites:

• USB mass storage devices must be connected to the local device.
• The USB redirection policy must be enable in store.

Limitations:

Users cannot redirect two USB mass storage devices that share the same Product ID and Vendor ID simultaneously.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.

HDX Direct V2 for non-shield scenario (Technical Preview)

Starting with version 2411, HDX Direct V2 allows direct connections from clients to Virtual Delivery Agent (VDA), bypassing the Citrix Gateway service. This feature improves performance and reduces latency for both internal and external users through a direct path to the session host, resulting in fewer network hops and improved in-session performance. Also, the decreased load on the Citrix Gateway service enhances the overall system efficiency.

Prerequisites:

• Access to the internal network or configuration for direct connections.
• Network infrastructure that supports direct VDA connections.
• Configuration of Session Traversal Utilities for NAT (STUN) and Traversal Using Relay around NAT (TURN) servers.

To manage the HDX Direct V2 feature, use the following commands:

Limitation:

Requires ownership of STUN and TURN servers.

For more information, see HDX Direct.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.

Enable Audio Quality Enhancer to improve audio performance (Technical Preview)

Starting with the 2411 version, Audio Quality Enhancer (v2) is added for Adaptive Audio.

Audio Quality Enhancer effectively manages short periods of packet loss and disruptions by intelligently reconstructing audio from previous samples, thus preventing noticeable degradation in quality. Furthermore, it intelligently and adaptively recovers lost audio packets, if and only when needed. It enables and disables itself adaptively when packet loss increases and decreases for a sustained period. Audio Quality Enhancer optimizes audio playback and recording quality in both good and bad network conditions.

To enable Audio Quality Enhancer, complete the following steps on the client:

1. Enable Adaptive Audio.
2. Enable Loss Tolerant Mode for Audio.

3. Enable the feature:

   • defaults write com.citrix.receiver.nomas PacketLossConcealmentEnabled -bool YES
   • defaults write com.citrix.receiver.nomas EnableNetStat -bool YES
4. Enable Audio Quality Enhancer on the Virtual Delivery Agent as well, which is required to fully enable the feature. That is, Audio Quality Enhancer needs to be enabled on both the Virtual Delivery Agent and Citrix Workspace app sides to function end-to-end for audio playback and recording.

To disable Audio Quality Enhancer, complete the following steps on the client:

1. Disable the feature:
   • defaults write com.citrix.receiver.nomas PacketLossConcealmentEnabled -bool NO
   • defaults write com.citrix.receiver.nomas EnableNetStat -bool NO
2. Disable Audio Quality Enhancer on the VDA as well, which is required to fully disable the feature.

Note:

Technical previews are available for customers to test in their non-production or limited production environments, and to give customers an opportunity to share feedback. Citrix does not accept support cases for feature previews but welcomes feedback for improving them. Citrix might or might not act on feedback based on its severity, criticality, and importance. It is advised that Beta builds aren’t deployed in production environments.

Citrix Enterprise Browser

This release includes Citrix Enterprise Browser version 130.1.1.12, based on Chromium version 130. For more information, see the Citrix Enterprise Browser documentation.

Fixed issues

• You might experience Server File Type Association (SFTA) redirection failure in an mTLS workflow when accessing internal URLs from Mac. [CVADHELP-26806]

• The webcam H.264 encoder has a bandwidth limit for resolutions up to 1080p. [HDX-69178]

Known issues

There are no new known issues.