Product documentation
Citrix Workspace app for Windows
2503.10-Current Release 2507 LTSR 2402 LTSR 2203.1 LTSR 1912 LTSR
View PDF

Citrix Workspace™ app 2507 LTSR for Windows

September 8, 2025
Contributed by: 
C S

Learn about new features and enhancements available for Citrix Workspace app 2507 LTSR for Windows.

Important::

Citrix Enterprise Browser™ do not get Citrix Workspace app LTSR benefits (extended lifecycle and fix‑only cumulative updates) as its’nt LTSR compliant. However, it is allowed to be used with Citrix Workspace app LTSR as compatible component. You must know that Citrix Workspace app LTSR includes current release updates for this component. Also, Citrix Enterprise Browser isn’t installed by default, as it is considered optional.

Starting with LTSR 2507, Citrix Workspace App for Windows supports Arm64 devices in emulation mode. App Protection in this configuration can be leveraged to block screen capture attempts of sensitive content in protected applications by AI Agents like Microsoft Recall.

What’s new in 2507 LTSR

The following is a list of features that are available in Citrix Workspace app 2507 LTSR for Windows.

2507 LTSR features

Note:

  • Citrix Workspace app for Windows 2507 is now available. You can sign in with your account to access the download.

  • Citrix Workspace app version 2507 LTSR is designated as the final version to include official support for Microsoft Windows 10. Following the End-of-Life (EOL) of Windows 10 in October, subsequent Current Release (CR) builds of Citrix Workspace app (such as version 2511) might still be installed on Windows 10 devices. However, Citrix cannot provide official support for operating systems that are no longer supported by Microsoft. While core functionality will continue to be validated during testing, any issues specific to Windows 10 reported after the EOL date will only be addressed on a best-effort basis. In addition, Citrix cannot guarantee compatibility with changes in Microsoft components (for example, .NET Framework or Edge WebView2) that might affect the Citrix Workspace app experience on Windows 10 beyond version 2507 LTSR.

  • Citrix Enterprise Browser can be used with Citrix Workspace app LTSR as a compatible component. However, it isn’t installed by default. To install Citrix Enterprise Browser, add install switch InstallEmbeddedBrowser=Y or Addlocal parameter CitrixEnterpriseBrowser as part of the command-line installation.

  • If.NET isn’t installed on the system or a version less than 8.0.15 is installed on the system, Citrix Workspace app installs .NET version 8.0.16.

  • If you install any supported higher version of .NET, Citrix Workspace app is compatible with the highest available .NET version (up to 8.x).

Citrix Troubleshoot Connection

Citrix empowers end users to self-troubleshoot desktop or app launch failures. The system provides recommendations to fix issues. Users can execute fixes with a single button click. Enhanced error messages help users understand launch failure causes clearly.

The Citrix Troubleshoot Connection feature analyzes VDA reachability challenges during launch. It provides user-friendly error messages in real time during failures. The feature offers recommendations to fix issues or collect logs for support tickets.

For more information, see Citrix Troubleshoot Connection.

Extends long-term support to Windows 11 IoT enterprise LTSC

Citrix Workspace app for Windows now supports Windows 11 IoT Enterprise Long-Term Servicing Channel (LTSC), offering vital stability and reliability for these devices. This crucial enhancement supports fixed-function, special-purpose devices, ensuring a 10-year long-term support lifecycle, providing essential and lasting stability. This support particularly benefits industries like banking, quick-service restaurants, healthcare, hospitality, manufacturing, and retail, requiring consistent equipment operation.

Automated Endpoint Analysis client installation

The Endpoint Analysis client for Windows now automatically installs with Citrix Workspace app, providing significantly easier deployment than previous GACS-only automatic installation options. This auto-installation greatly aids deployment for customers using BYOD and unmanaged devices, streamlining processes for administrators and boosting overall efficiency.

Note:

Starting with Endpoint Analysis client version 25.8.1.2, support for 32-bit systems has been discontinued.

Service continuity enabled without self-service mode

Disabling self-service mode removes the user interface, allowing users to launch applications and desktops exclusively through shortcuts.

Service continuity is now supported even when self-service mode is disabled in Citrix Workspace app for Windows.

Enhanced session timeout enforcement on citrix Gateway

Starting with Citrix Workspace app for Windows version 2507, session timeout enforcement on the gateway has been improved. Previously, background refresh calls from the Citrix Workspace app might cause the Citrix Gateway to extend session timeouts, even when there was no actual user activity.

Enhanced storebrowse session handling

Starting with this release, storebrowse’ session handling is improved with the following enhancements, optimizing user experience and critical resource management within high-availability environments to boost efficiency:

  • Storebrowse intelligently ignores existing sessions when launching virtual applications

  • Storebrowse API support for returning session lists

For more information, see Enhanced storebrowse session handling.

Support for GACS claimed URLs for the US Gov region

Starting with version 2507, Citrix Workspace app supports discovery of Global App Config Service (GACS) claimed URLs for the US Gov region alongside commercial cloud deployments.

You can select the region from which Citrix Workspace app retrieves discovery endpoints using the GACS Discovery Region policy setting.

For more information, see Support for GACS claimed URLs for the US Gov region.

Automated sign-out on session disconnect

Beginning with this release, Citrix Workspace app can automatically sign out users when their session is disconnected. This feature is designed for kiosk environments to enhance security on shared devices.

You can enable this feature through Group Policy Object (GPO) or Global App Configuration service (GACS).

For more information, see Automated sign-out on session disconnect.

ADMX file import support for Intune

Citrix Workspace app now supports the import of ADMX administrative template files in Microsoft Intune. This enhancement enables easier policy configuration and management for Workspace app deployments through Intune.

Modular Browser Content Redirection

Starting with the Citrix Workspace app 2507 for Windows, the Browser Content Redirection (BCR) component is now managed as a modular component, separate from the main Citrix Workspace app installer.

This new modular and evergreen model allows the Browser Content Redirection component to be updated independently and uninstalled independently. This feature provides the following key benefits:

  • Enhanced security: The BCR Chromium Embedded Framework component can receive security patches and updates as soon as they are available, without waiting for a full Citrix Workspace app release.
  • Simplified Management: Customers no longer need to update entire Citrix Workspace app to receive the latest Browser content redirection features.
  • Accelerated Innovation: Faster deployment of new BCR features, enhancements, and bug fixes is now possible, delivering continuous value to customers

To ensure a consistent user experience, the Modular BCR component is installed by default in Citrix Workspace app.

Note:

In Citrix Workspace app 2402 LTSR, the BCR component was not installed by default. With Citrix Workspace app 2507 LTSR, BCR has undergone significant user experience improvements and is now installed by default.

For more information, see Modular Browser Content Redirection.

Zoom 64-bit plug-in management support

Zoom has announced that Version 6.2.10 is the last version to support a 32-bit plugin. For more information, see Zoom documentation.

Starting from 2507 version onwards, Citrix Workspace app installs the Zoom plug-in management based on the endpoint architecture. If endpoint OS is 64-bit, then Citrix Workspace app installs 64-bit plugin management and keep it updated through auto-update service.

Simplified distribution of uberAgent on endpoints through Citrix Workspace app

uberAgent delivers advanced User Experience and Endpoint Security related insights. Starting with 2507 release, uberAgent is now packaged with Citrix Workspace app. This integration supports simplified distribution of uberAgent, streamlining deployment and reducing administrative overhead.

For more information, see uberAgent add-on support for managed devices in Citrix Workspace app.

Enhanced background blur persistence for webcam

Starting with version 2507, the background blur setting persists between sessions and reconnects. Citrix Workspace app remembers your preference automatically. You can enable the background blur feature by navigating to Preferences > Connections and select Enable background blur.

For more information, see Enhanced background blur persistence for webcam.

Enhanced keyboard layout settings notification

Starting with this release, the keyboard layout settings UI displays a warning that informs you that a session relaunch is required for changes to take effect.

For more information, see Enhanced keyboard layout settings notification.

License telemetry upload using Citrix Workspace app

With this release, you can upload license telemetry data to Citrix Analytics Service through client connections when the license server cannot reach Citrix Analytics service directly.

When your license server loses connectivity to Citrix Analytics service, the feature automatically routes telemetry data through the Virtual Desktop Agent (VDA) and client connection. This ensures continuous license reporting regardless of Customer Experience Improvement Program (CEIP) settings.

Benefits:

  • Maintains uninterrupted license telemetry reporting
  • Helps preserve compliance requirements
  • Provides consistent usage analytics for your Citrix environment
  • Works independently of CEIP configuration

Enable noise suppression

Starting with the 2507 version, Citrix Workspace app now offers improved audio redirection with enhanced noise suppression. This feature reduces background noise, ensuring clearer and more accurate speech, improving the overall communication experience.

Note:

This feature is disabled by default.

For more information, see Enable noise suppression.

Version upgrade for Chromium Embedded Framework

The version of the Chromium Embedded Framework (CEF) used in the Browser Content Redirection (BCR) is upgraded to 137. This upgraded version includes fixes for known security vulnerabilities.

Citrix Enterprise Browser

This release includes Citrix Enterprise Browser version 139.1.1.18, based on Chromium version 139. For more information about the Citrix Enterprise Browser, see the Citrix Enterprise Browser documentation.

App Protection support for ARM64 on Windows

Starting with Citrix Workspace app for Windows version 2507, App Protection is supported on ARM64 devices running Citrix Workspace app in emulated mode. This update ensures that users on ARM64 machines can seamlessly use App Protection features. App Protection in this configuration can be leveraged to block screen capture attempts of sensitive content in protected applications by AI Agents like Microsoft Recall. For more information, see Blocking of Screen Capture from AI-Powered tools

Technical Previews

  • Browser Profile Sharing in Browser Content Redirection
  • HDX™ graphics superresolution upscaling
  • Cross-session clipboard exchange

For the complete list of Technical Preview features, see the Features in Technical Preview page.

Feature included from previous releases

This release supports features that were included in Citrix Workspace app for Windows version from 2403 to 2503.10 as listed below.

2503.10

Audio Quality Enhancer to improve audio performance

Starting with version 2503.10, the audio quality enhancer is enabled by default for adaptive audio.

Audio quality enhancer maintains clear audio during brief network disruptions. This feature adapts to the network conditions to ensure consistent audio performance during playback and recording.

Note:

Both adaptive audio and loss tolerant mode for audio must be enabled for this feature to work.

Schedule automatic update using GACS

You can now define and schedule the timeframe in which the automatic Citrix Workspace app update must be performed using Global App Configuration Service (GACS).

  • Define timeframe for automatic update: Administrators can now schedule automatic updates for Citrix products at any preferred time on their Windows devices. During this specified time, software updates automatically or users receive notifications on available updates.
  • Manage automatic update version and rollout period: Administrators can schedule a convenient start date and rollout period for a specific version of Citrix Workspace app during which an automatic update is set to roll out to their end users. This capability allows them to determine the rollout dates, minimizing disruption to end users and improving the user experience.

For more information, see the Define timeframe for automatic update and manage automatic update version and rollout period for Citrix Workspace app documentation.

2503

The following features are added in this release:

Client-side graphics optimizations

This release includes significant optimizations to the HDX client-side graphics engine, resulting in noticeable performance improvements and higher frame rates for a smoother user experience. For more information, see the Graphics section in the Citrix Virtual Apps and Desktops documentation.

Persistent session in Citrix Workspace app

With this release, if you enable the Persistent session feature, Citrix Workspace app automatically detects session termination and relaunches the application or desktop without any user intervention when the application or desktop session logs out or disconnects.

This feature ensures uninterrupted application or desktop availability, improving user experience and productivity.

For more information, see Persistent Session in Citrix Workspace app documentation.

Enhanced Desktop Viewer toolbar

Starting with the 2503 version, Citrix Workspace app for Windows provides an enhanced Desktop Viewer toolbar.

Enhanced Desktop Viewer

For more information, see the Enhanced Desktop Viewer toolbar documentation.

Enhancement to connection strength indicator on Desktop Viewer toolbar

Starting with version 2503, the Connection Strength Indicator on the Desktop Viewer toolbar is enhanced with new features to provide a better user experience.

Connection strength indicator

For more information, see the Enhancement to connection strength indicator on Desktop Viewer toolbar documentation.

Multi-monitor layout selection

Starting with version 2503, the Multi-Monitor Selector (MMS) allows users to choose which displays to use in full-screen mode for desktop sessions only, not for seamless sessions. A new Multi-Monitor button has been added to the toolbar, which appears only when more than one screen is connected. This feature enhances the flexibility and usability of multi-monitor setups in desktop sessions, providing a more tailored and efficient user experience.

For more information, see Multi-monitor layout selection documentation.

Enhancements on Desktop Lock or Boot to VDI feature

From this release, the Citrix Workspace app Desktop Lock, also known as the direct boot to VDI feature, includes the following enhancements:

  • Integrated Installer: Desktop Lock is now part of the main Citrix Workspace app installer, simplifying deployment and distribution for admins. When you install Citrix Workspace app using:

    • Command line installation: You can enable Desktop Lock using command-line parameters during the installation.
    • UI: You can enable Desktop Lock using the Group Policy Object (GPO) policy after the installation.

    You need to reboot the machine after enabling the Desktop Lock feature.

  • De-coupled from SSON: Previously, you had to install the Citrix Workspace app for Windows with the /includeSSON flag to enable the Desktop Lock feature. Desktop Lock is now available without single sign-on (SSON). However, it is recommended to use it with SSON enabled for a seamless experience.

  • Enable feature through policy or command line: You can manage the feature enablement through GPOs. This enhancement provides granular controls to enable the feature at any point in time. The following policies can be managed in the Group Policy Editor:

    • AllowDesktopLockOnMachine: This policy is a machine-level policy that allows the ability to switch to Desktop Lock for any user on the machine. This requires a reboot of the machine.
    • EnableDesktopLockforAllStandardUsers: This policy is a machine-level policy that enables Desktop Lock for all standard users on the machine. Along with this policy, you need to enable the AllowDesktopLockOnMachine policy.
    • EnableDesktopLockforUser: This policy is a user group policy to enable or disable Desktop Lock for a specific user. Along with this policy, you need to enable the AllowDesktopLockOnMachine policy.

-. Post-installation configuration: Stores can be configured post-installation, extending Desktop Lock to existing stores configured through GPO.

  • Support for any identity provider (IDP): Desktop Lock now supports booting into VDI with any IdP that supports Citrix Workspace app.

Note:

You must reboot the machine after upgrading Citrix Workspace app for Windows with the Desktop Lock feature for the changes to take effect.

For more information, see the Citrix Workspace app Desktop Lock documentation.

Simplified SSON

Previously, to enable the single sign-on (SSON) feature, you had to install the Citrix Workspace app for Windows with the /includeSSON flag or select the Enable Single Sign-on checkbox during installation.

With this release, the system installs SSON by default in dormant mode. You can enable SSON post-installation using the Group Policy Object (GPO) policy. To enable, navigate to User Authentication > Local user name and password and select the Enable pass-through authentication checkbox.

Note:

You must reboot the system after updating the GPO policy for the setting to take effect.

Seamless integration of deviceTRUST with Citrix Workspace app

Starting with version 2503, Citrix Workspace app for Windows includes deviceTRUST, enhancing security through continuous device posture checks within the session. deviceTRUST is packaged with Citrix Workspace app for unified deployment, ensuring seamless integration and management.

For more information, see the Seamless integration of deviceTRUST with Citrix Workspace app for Windows.

Enhancement to auto-update

The auto-update of Citrix Workspace app is now enhanced with the following features:

  • Define timeframe for automatic update: Administrators can now schedule automatic updates for Citrix products at any preferred time on their Windows devices. During this specified time, software updates automatically or users receive notifications on available updates.
  • Manage automatic update version and rollout period: Administrators can schedule a convenient start date and rollout period for a specific version of Citrix Workspace app during which an automatic update is set to roll out to their end users. This capability allows them to determine the rollout dates, minimizing disruption to end users and improving the user experience.

You can enable these features using Group Policy Object (GPO).

Benefits:

  • Custom rollout period: Admins can determine the rollout period for their organization, overriding the default period set by Citrix.
  • Scheduled updates: Admins can specify the hours or time frame during the day to check for and update Citrix Workspace app.
  • Flexible update days: Admins can choose a specific start date to specify when to download and begin installation updates.

For more information, see the Define timeframe for automatic update and manage automatic update version and rollout period for Citrix Workspace app documentation.

Enable auto-update for active users only

Starting with version 2503, the auto-update feature has been enhanced to trigger only for active users.

For more information, see the Enabled auto-update for active users only documentation.

Enhanced installation process for Citrix Workspace app with App Protection

Previously, when App Protection was enabled, the /cleanInstall switch was not supported, and the user had to manually uninstall and reboot the machine before retrying installation. Starting with version 2503, when App Protection is enabled and when running the /cleanInstall command, Citrix Workspace app automatically uninstalls, reboots the machine based on user selection, and reinstalls the app during the reboot.

For more information, see the Enhanced installation process for Citrix Workspace app with App Protection documentation.

Improved installation process for Citrix Workspace app

Citrix Workspace app installation is now more robust. In version 2503, the installer is improved to handle situations where other installations (like Windows Update) are in progress. Instead of failing, Citrix Workspace app now waits for the other installation to complete, ensuring a successful installation.

Auto-sync backend resource changes for Start menu and Desktop shortcuts

The auto-sync backend resource changes feature enhances the user experience by automatically synchronizing backend resource changes for the start menu and desktop shortcuts.

Key features:

  • Updating shortcuts with updated resource path:
    The shortcut automatically points to the new path when the resource path is updated in the backend, eliminating the need for manual refresh. This feature is enabled by default.

  • Option to show disabled shortcuts:
    The shortcut remains visible even when a resource is disabled in the backend. Previously, the shortcut was removed when a resource was disabled. This feature is useful for temporary maintenance, allowing users to retain the shortcut. This feature is disabled by default and can be enabled using the Show Disabled Shortcut setting in either the Global App Configuration Service (GACS) or the Group Policy Object template.

For more information, see the Auto-sync backend resource changes for Start menu and desktop shortcuts documentation.

Install Zoom and Webex plug-in managers during Citrix Workspace app installation

Citrix Workspace app version 2503 provides an option to install the Zoom and Webex plug-in managers during the installation. You can use either the UI or command-line for this installation.

For more information, see the Install plug-ins documentation.

Log collection support for non-admin users

This feature extends the Citrix Workspace app for Windows log collection capability to support non-admin users. Previously, log collection was partially supported for users for whom Citrix Workspace app was installed by an admin. With this enhancement, complete log collection is now possible for users for whom Citrix Workspace app is installed by an admin.

Enhanced security and compatibility with AppLocker

Citrix Workspace app for Windows now offers improved compatibility with AppLocker, a security posture tool. This enhancement addresses security concerns and enhances the user experience by aligning more effectively with AppLocker policies.

With this release, application stubs created using File Type Association (FTA) are no longer created by default. Previously, these stubs were unsigned binaries, and AppLocker settings were often required to block them from running. By eliminating the creation of unsigned application stubs, this feature strengthens security and minimizes potential vulnerabilities in environments configured with AppLocker.

Improved audio performance in Microsoft Teams

Starting with the Citrix Workspace app for Windows version 2503, the audio subsystem used in the HDXRTCMediaEngine has been replaced with a newer system. As a result, Microsoft Teams now provides better audio performance, enhancing the overall user experience during calls and meetings. Along with this feature, the following issues related to Microsoft Teams optimization have been resolved:

  • The new plug-in device might not be available in the Microphone drop-down menu option.
  • Duplicate entries of devices might be present in the Microphone drop-down menu option.
  • Users might not hear from the new plug-in headset when the default output devices (Speakers/Headphones) on the client are disabled.
  • Unplugging the last connected device might make the system unresponsive.

Monitor third-party UC app optimization status using Citrix Director

You can now monitor details about third-party Unified Communications (UC) applications and their plug-ins using Citrix Director. This feature helps administrators monitor performance and troubleshoot issues, ensuring a consistently positive user experience.

Prerequisites
  • Virtual Delivery Agent (VDA) 2503

For more information, see the Director documentation.

Benefits
  • Enhanced visibility: A unified view of UC app optimization status in Director simplifies monitoring and troubleshooting across multiple vendors.
  • Improved user experience: Proactive issue identification and resolution ensure optimal collaboration experiences for end-users.
  • Streamlined IT operations: Centralized monitoring reduces complexity and empowers administrators to efficiently manage UC environments.

This feature enables active issue resolution and ensures a consistently positive user experience.

Hybrid launch support using GACS for on-premises stores

Starting with version 2503, Citrix Workspace app for Windows supports management using Global App Configuration Service (GACS) in hybrid launch for on-premises stores. In a hybrid launch scenario, users access Citrix resources through a web browser. When an application or desktop is selected, Citrix StoreFront™ generates an ICA file with the necessary launch instructions. The locally installed Citrix Workspace app then reads the ICA file, and establishes a secure connection to the remote application or desktop.

For more information, see Hybrid launch support using GACS for on-premises stores.

Technical Previews

  • Hybrid launch support using GACS for cloud stores
  • Browser Profile Sharing
  • Enable noise suppression
  • Screen recording for specific applications

For the complete list of Technical Preview features, see the Features in Technical Preview page.

2409.10

This release addresses a few issues that help to improve overall performance and stability.

2409.1

This release addresses a few issues that help to improve overall performance and stability.

2409

Note:

  • The minimum required version of .NET Desktop Runtime is 8 for Citrix Workspace app for Windows 2409.

The following features are added in this release:

Support for Windows 11 24H2

Citrix Workspace app for Windows 2409 provides support for the Windows 11 24H2 release. This ensures a smooth transition for users upgrading to the latest Windows version and allows them to continue using Citrix Workspace app without any disruption.

Note:

The Enable MPR notifications for the System policy in the Group Policy Object template must be enabled to support the domain pass-through (single sign-on) authentication feature on Windows 11. By default, this policy is disabled on Windows 11 24H2. So, if upgraded to Windows 11 24H2, you must enable the Enable MPR notifications for the System policy.

Feature flag management

Citrix is changing the way that it manages feature flags, allowing access to preview features and enabling dynamic management of features in production. To ensure optimal functioning of features that are under feature flags, you need to enable traffic to the URL features.netscalergateway.net.

For more information, see Feature flag management.

Single sign-on support for Edge WebView when using Microsoft Entra ID

Previously, when using Entra ID, authentication failed for Citrix Workspace app. With this release, Citrix Workspace app supports single sign-on (SSO) for Edge WebView when using Entra ID for authentication.

You can enable this feature using the UI or through Group Policy Object (GPO).

For more information, see Single sign-on support for Edge WebView when using Microsoft Entra ID.

Enhanced virtual desktop screen resizing experience

Starting with the 2409 version, Citrix Workspace app for Windows ensures a smooth transition and prevents dark screens and flickers when resizing or stretching your virtual desktop screen. This feature is enabled by default.

For more information, see Enhanced virtual desktop screen resizing experience.

Enhanced desktop launch experience

Starting with version 2409, Citrix Workspace app for Windows ensures an enhanced desktop launch experience. You experience a seamless, flicker-free transition to your desktop without intermediate screens. The app also eliminates dark screens and flickering during resizing or stretching, providing a stable and modern interface. This feature is enabled by default.

Enhanced launch

For more information, see Enhanced desktop launch experience.

Enhancement to sustainability initiative

With this release, the sustainability initiative from Citrix Workspace app is enhanced to include the following extra keywords:

  • ICA-Title="sample title": The sample title is shown as the title. It’s recommended to limit the title character count to 30.
  • ICA-Icon=true: The green-leaf icon is shown. If set to false, the green leaf icon is hidden.

Example:

KEYWORDS: ICA-LogOffOnClose=true ICA-PromptMessage="Do you want to sign out from the session?" ICA-Title="Logout or disconnect" ICA-Icon=true
<!--NeedCopy-->

Note:

With this enhancement, if old keywords are detected, the behavior reverts to the default behavior.

For more information, see the Sustainability initiative from Citrix Workspace app section.

Streamlined beacon checks

With this release, you can now use a single internal beacon to determine the network location, eliminating the need for both external and internal beacons. This feature reduces dependencies, enhances reliability, and improves the end-user experience.

.NET requirements

Citrix Workspace app for Windows now requires .NET Desktop Runtime 8.0 (8.0.4 or later). If the endpoint updates the .NET Desktop Runtime, any .NET Core-based app running at the time of the update might exhibit inconsistent behavior. To mitigate this issue, Citrix Workspace app restarts itself. Users receive the following notification once the restart is complete:

.Net update restart

Any active sessions continue to work.

For endpoints with .NET 8.0.10 or later, see Knowledge Center article CTX692228.

For more information see, .NET requirements.

SOCKS5 proxy support for EDT

Previously, Citrix Workspace app only supported HTTP proxies operating on TCP. However, SOCKS5 proxy functionality was already fully supported within the Virtual Delivery Agent (VDA). For more information on VDA support, see the Rendezvous V2 documentation.

With this release, Citrix Workspace app now supports SOCKS5 proxies for Enlightened Data Transport (EDT), enhancing compatibility with modern enterprise network configurations.

Key benefits:

  • Expanded proxy compatibility: Connect seamlessly through SOCKS5 proxies, widely used by enterprise networking teams for their support of both TCP and UDP traffic.
  • Improved EDT performance: Use the full benefits of EDT (UDP-based) for optimized data transfer within Citrix Workspace app sessions.

For more information see, SOCKS5 proxy support for EDT.

Customization of Desktop Viewer toolbar

With this release, you can customize the options on the Desktop Viewer toolbar using the Global App Configuration service, Group Policy Editor, or any third-party endpoint management software capable of pushing Windows registry keys.

For more information see, Customization of Desktop Viewer toolbar,

Remember USB connections

This feature enhances the user experience when remoting USB devices to a Citrix Virtual Apps and Desktops™ session. While auto-redirection supports using device rules exists, this feature simplifies the process by remembering manually requested connections and reconnecting them with minimal configuration.

For more information see, Remember USB connections.

Disabling the “Exiting Full Screen Mode” tip prompt

Starting with Citrix Workspace app for Windows 2409, you can suppress the “Exiting Full Screen Mode” tip prompt that appears during HDX sessions using the Registry Editor.

For more information see, Disabling the “Exiting Full Screen Mode” tip prompt.

Support for WebHID API in UCSDK

Starting with the 2409 version, Citrix Workspace app for Windows supports the WebHID API to redirect Human Interface Device (HID) from an endpoint to Unified Communication SDK (UCSDK) integrated app on the VDI. It complies with the HID standard for bi-directional communication between the app that is integrated with UCSDK and the HID devices connected to the endpoint. With this feature, your UCSDK app interprets the HID headset commands such as Call accept, reject, mute, or unmute and so on in the HDX session for an enhanced user experience. This feature is enabled by default.

For more information see, Support for WebHID API in UCSDK.

Support for TLS protocol version 1.3

Starting with this release, Citrix Workspace app supports the Transport Layer Security protocol (TLS) version 1.3.

Note:

This enhancement requires VDA version 2303 or later.

This feature is disabled by default.

For more information, see Support for TLS protocol version 1.3.

Disabling TLS 1.0 or 1.1 communication protocols

Starting with Citrix Workspace app for Windows 2409, the use of TLS 1.0 or 1.1 communication protocols is no longer enabled nor supported by default. This change enhances security by removing deprecated and potentially insecure protocols.

Benefits:

  • Enhanced Security: Disabling outdated protocols reduces the risk of security vulnerabilities.
  • Compliance: Aligns with industry standards and recommendations, such as RFC 8996.

Default audio device selection

Starting with the 2409 version of Citrix Workspace app, you can now select your preferred audio devices directly from the Preferences section. This feature allows for the splitting of audio devices across different VDA (VDAs) and monitors, providing a more customized audio experience.

For more information, see Default audio device selection.

Virtual Channel Plugin Manager

The Virtual Channel Plugin Manager can detect when the end-user on the VDA launches a third-party application (for example, New Microsoft Teams), check if its respective VDI plug-in is already installed on the endpoint, and prompt the user to install the plug-in if it is not.

For more information, see the Virtual Channel Plugin Manager documentation.

Connection Strength Indicator on Desktop Viewer toolbar

Starting with version 2409, Citrix Workspace app for Windows now supports the Connection Strength Indicator (CSI) on the Desktop Viewer toolbar. This feature displays a network strength icon that alerts you of network issues. You can click the indicator to view real-time connection statistics for the client and VDA, and copy diagnostic information to share with IT for advanced troubleshooting.

Benefits:

  • Immediate feedback: The network strength icon gently nudges users when network issues are detected.
  • Enhanced troubleshooting: Real-time stats and diagnostics help users and IT teams quickly identify and resolve connectivity issues.

For more information, see the Connection Strength Indicator on Desktop Viewer toolbar.

Deprecation of PNAgent-based stores

Starting from the 2409 release, PNAgent-based stores are no longer supported. PNAgent support was officially deprecated in the 2403 release. For more information, see the Deprecation table.

Note:

We recommend connecting through StoreFront using a store URL instead.

Citrix Enterprise Browser

This release includes Citrix Enterprise Browser version 130.1.1.12, based on Chromium version 128. For more information about the Citrix Enterprise Browser, see the Citrix Enterprise Browser documentation.

Technical Previews in 2409

  • Enable Audio Quality Enhancer to improve audio performance

For the complete list of Technical Preview features, see the Features in Technical Preview page.

2405.11

Note:

The Enable MPR notifications for the System policy in the Group Policy Object template must be enabled to support the domain pass-through (single sign-on) authentication feature on Windows 11. By default, this policy is disabled on Windows 11 24H2. So, if upgraded to Windows 11 24H2, you must enable the Enable MPR notifications for the System policy.

This release addresses a few issues that help to improve overall performance and stability.

2405.10

Note:

The minimum Microsoft Visual C++ Redistributable version required for Citrix Workspace app for Windows 2405.10 is 14.40.33810.0.

This release addresses issues that help to improve overall performance, security, and stability.

2405

The following features are added in this release:

Compatibility with the higher versions of .NET

Citrix Workspace app for Windows version 2405 is compatible with the higher versions of .NET that are supported on your system. To ensure this compatibility, Citrix Workspace app follows these installation rules:

  • If .NET 6.0.20 or any supported higher version of .NET is installed on the system, Citrix Workspace app does not install any additional .NET versions.
  • If.NET isn’t installed on the system or a version less than 6.0.20 is installed on the system, Citrix Workspace app installs .NET version 6.0.25.
  • If you install any supported higher version of .NET, Citrix Workspace app is compatible with the highest available .NET version. For example, you can install .NET 8.x and uninstall .NET 6.0.25. In this case, Citrix Workspace app uses the .NET 8.x version.

Single sign-on support for ARM64-based devices

From this 2405 release, Citrix Workspace app for Windows supports the single sign-on feature on the ARM64-based devices. For more information on single sign-on, see the Authentication page.

New Add-ons and packaging

From Citrix Workspace app for Windows 2405 version, you can choose the following from the Add-on(s) page during the upgrade of Citrix Workspace app:

  • Start App Protection after installation
  • Enable single sign-on
  • Install Microsoft Teams VDI Plugin

You can uninstall the Microsoft Teams Optimization VDI plug-in independent of Citrix Workspace app.

Note:

If a plug-in is already installed on your system, that plug-in option is selected automatically for upgrade. Also, if you don’t have sufficient privileges to download the plug-in, that option won’t be visible on the Add-on(s) page.

Add-ons

Configure store names for your store URL

With this feature, admins can give the stores a user friendly name to recognize. In addition, admins can enable or disable the ability for end users to modify the store name on their Citrix Workspace app.

For more information, see Configure store names for your store URL.

Improved Beacon checker tool

As part of the Configuration Checker utility, Citrix Workspace app allows you to do a beacon test using the Beacon checker tool.

Earlier the Beacon test supported only the ping.citrix.com beacon. Starting from Citrix Workspace app for Windows 2405 version onwards, beacon test works for all the beacons configured in the store added in Citrix Workspace app.

For more information, see Configuration Checker and Beacon test.

Option to prevent endpoint from going to sleep when a session is active

When a user with an active session stays away from the virtual desktop without any mouse or keyboard activity, the endpoint device might go into sleep mode after completing the set time for Windows sleep mode. As a result, the Citrix session might be disconnected and when the user returns to the session, the user might be unable to reconnect to the existing session.

With this release, a new policy named Power Management is introduced to prevent the endpoint devices from going to sleep when a session is active.

For more information, see Option to prevent endpoint from going to sleep when a session is active.

Enhancement to relative mouse

With this release you can restrict the usage of the mouse to the window using the preferences UI available from the toolbar. This enhancement helps you to use the apps that need to monitor mouse movement extending to or beyond the boundaries of the virtual desktop’s screen. These apps include third-party apps or those apps that scroll a view in response to mouse movement. For more information, see Enhancement to relative mouse.

Share system audio

You can now share the audio playing on your VDA with participants in a meeting. Select the Include computer sound option to make your meetings more engaging. This feature is enabled by default. For end users, to use the feature, turn on Include computer sound on before sharing their screen.

Include computer sound

Limitations:

  • Audio cannot be shared using this feature when sharing the screen with RAVE and BCR redirected apps or tabs.
  • This feature is supported only on published desktops.

Upgraded version of WebRTC for the optimized Microsoft Teams

The version of WebRTC that is used for the optimized Microsoft Teams is upgraded.

Support for MJPEG webcams

Starting with the 2405 version, MJPEG webcams are supported in the H264 stream. The webcam performs MJPEG compression internally which provides better image quality and a higher frame rate.

This feature is enabled by default. However, if certain Webcam doesn’t support MJPEG, this feature is disabled.

Enhanced System Logs for browser content redirection

With the enhancements to the System Logs, browser content redirection now allows admins to monitor the feature status. For more information, see Browser content redirection.

App Protection support for double-hop scenario

Starting with the Citrix Workspace app for Windows 2405 version, App Protection is supported for the double-hop scenario when installed on a workstation VDA (such as Windows 10 or Windows 11) for a single-session VDA.

The following features are currently supported:

For more information, see App Protection with double-hop scenario.

Modify the user-agent of Citrix Enterprise Browser

Administrators can now modify the Citrix Enterprise Browser’s user-agent for any internal web or SaaS apps. You can configure this through Global App Configuration service. This feature provides the flexibility to create different variations of the user-agent for Citrix Enterprise Browser, which you can use for various uses.

One such use-case is the ability to restrict the internal web or SaaS apps to open only in Citrix Enterprise Browser. In addition to modifying the user-agent, you need to configure the Identity Provider (IdP) to perform a conditional check that verifies whether the end user is trying to open the app using Citrix Enterprise Browser or a native browser. The IdP opens the app only if end user tries to access it using Citrix Enterprise Browser. This restriction prevents users from accessing sensitive information in these apps from other browsers.

For more information, see Use Case 3c - Restrict apps to Citrix Enterprise Browser by modifying its user-agent.

Additional security restrictions for the Citrix Enterprise Browser

Citrix introduces additional access restrictions to enhance the security and user experience of Citrix Enterprise Browser with Secure Private Access and Global App Configuration service (GACS).

Restrictions managed through Secure Private Access

Copy:

Administrators can enable or disable copying of data from a SaaS or internal web app with this access policy when accessed using Citrix Enterprise Browser. The default value is Enabled.

For more information, see the Copy restriction in the Secure Private Access product documentation.

Paste:

Administrators can enable or disable pasting of copied data into the SaaS or internal web app with this access policy when accessed using Citrix Enterprise Browser. The default value is Enabled.

For more information, see the Paste restriction in the Secure Private Access product documentation.

Personal data masking:

Administrators can use the Personal data masking restriction to mask various types of sensitive information such as credit card numbers, social security numbers, and dates. Also, you have the flexibility to define custom rules for detecting specific types of sensitive information and masking it accordingly. The Personal data masking restriction has the option to fully or partially mask the information.

For more information, see Personal data masking.

Upload restriction by file type:

Administrators can restrict file uploads based on MIME (multi-purpose internet mail extensions) types. Unlike the Uploads policy, which allows you to enable or disable all file uploads, the Upload restriction by file type restriction allows you to enable or disable file uploads for specific MIME types.

For more information, see Upload restriction by file type.

Download restriction by file type:

Administrators can restrict file downloads based on MIME (multi-purpose internet mail extensions) types. Unlike the Downloads policy, which allows you to enable or disable all file downloads, the Download restriction by file type restriction allows you to enable or disable file downloads for specific MIME types.

For more information, see Download restriction by file type.

Printer management:

Enterprises can now prevent the printing of confidential documents and unauthorized data sharing. Admins can configure this policy through Secure Private Access. Admins can configure the behavior for network printers, local printers, and print using the Save as PDF option.

The following options are available for administrators to control access to printers for the end users:

  • Network printers: A network printer is a printer that can be connected to a network and used by multiple users.
    • Disabled: Printing from any network printers in the network is disabled.
    • Enabled: Printing from all network printers is enabled. If printer host names are specified, then all other network printers apart from the ones specified are blocked.

    Note:

    Printers are identified by their host names.

  • Local printers: A local printer is a device directly connected to an individual computer. This connection is typically facilitated through Bluetooth, USB, parallel ports, or other direct interfaces.

    • Disabled: Printing from all local printers is disabled.

    • Enabled: Printing from all local printers is enabled.

  • Print using Save as PDF

    • Disabled: The Save as PDF option for saving the content in PDF format is disabled.

    • Enabled: The Save as PDF option for saving the content in PDF format is enabled.

Note:

  • If the admin has disabled certain printing options, then those options appear grayed out to the end users.
  • End users can’t use the network printer if it is renamed on their device.

Clipboard restriction for Security groups:

In Secure Private Access, administrators can restrict clipboard access to any designated group of apps. These designated groups of apps are created as Security groups in Secure Private Access, so that the end users are permitted to copy and paste contents only within that Security groups. There is also an Advanced option to enable copy and paste contents between Security groups and other local apps on the machines or unpublished web apps.

For more information, see Clipboard restriction for Security groups.

Restrictions managed through the Global App Configuration service

Clipboard restriction:

In GACS, administrators can use the Enabled Sandboxed Clipboard option to manage clipboard access. When you restrict clipboard access through GACS, all content copied from any website accessed within the Citrix Enterprise Browser can’t be pasted outside the Enterprise Browser. Similarly, any content copied from native apps can’t be pasted into any website accessed within the Enterprise Browser.

For more information, see Clipboard restriction.

Audio Capture Allowed:

Administrators can use this setting to enable or disable audio capture access. When an administrator enables this setting, or leaves it unset, users are prompted to allow audio capture access. When an administrator disables this setting, these prompts are turned off, and audio capture is blocked.

For more information, see Audio Capture Allowed.

Video Capture Allowed:

Administrators can use this setting to enable or disable video capture access. When an administrator enables this setting, or leaves it unset, users are prompted to allow video capture access. When an administrator disables this setting, these prompts are turned off, and video capture is blocked.

For more information, see Video Capture Allowed.

Technical Preview

  • Browser Content Redirection and Microsoft Teams Optimization support for ARM64-based devices

For the complete list of Technical Preview features, see the Features in Technical Preview page.

2403.1

This release addresses issues that help to improve overall performance, security, and stability.

2403

The following features are added in this release:

Sustainability initiative for cloud hybrid launch

Note:

This feature was previously available for native launches (cloud and on-premises) from the Citrix Workspace app 2309 version onwards.

From the Citrix Workspace app 2403 version, this feature is available for hybrid launches on cloud. After this feature is enabled, a prompt appears to sign out from the desktop session when a user closes a virtual desktop. This feature helps conserve energy if there are Windows OS policies that are used to shut down VMs when no users are logged in. You can also customize the text that appears on the Save energy screen. For more information, see Sustainability initiative for cloud hybrid launch.

Enhanced domain pass-through for single sign-on (Enhanced SSO)

Previously, Citrix Workspace app for Windows supported only SSON or domain pass-through authentication for single sign-on to Citrix Virtual Apps and Desktops environments using user credentials. This authentication enables the user to authenticate to the domain on their device and use their virtual apps and desktops without having to reauthenticate again.

With this release, Citrix Workspace app supports enhanced domain pass-through which is a new method of SSO. It uses Kerberos authentication instead of user credentials. Users can now sign in to Citrix Virtual Apps and Desktops and to StoreFront using integrated windows authentication. For more information, see Enhanced domain pass-through for single sign-on (Enhanced SSO).

Support for advanced NetScaler policies for Storebrowse on Windows

Citrix Workspace app for Windows now supports advanced policies on NetScaler Gateway with Storebrowse. The supported authentication protocol is LDAP authentication. Storebrowse is a command-line utility that interacts between the client and the server. It’s used to authenticate all the operations within StoreFront and with Citrix Gateway. For more information, see the Storebrowse page.

Note:

The nFactor authentication protocol isn’t supported with Storebrowse on Windows.

Install Microsoft Teams VDI plug-in for Citrix

You can now install the Microsoft Teams VDI plug-in during the installation of Citrix Workspace app using one of the following options.

Note:

For version compatibility with VDI and configuration details, see Microsoft Teams 2.1 supported for VDI/DaaS and New Microsoft Teams VDI requirements.

Hide Troubleshooting and Send Feedback options for end users

Admins can now hide the troubleshooting and send feedback options for their end users using the GPO editor. Once this setting is enabled, the Troubleshooting and Send Feedback options which were previously visible to the end users on the system tray is hidden. For more information, see Hide Troubleshooting and Send Feedback options for end users.

App Protection

Screen Capture Allow List

If Citrix Workspace app, virtual apps and desktops, or SaaS apps are enabled with the App Protection Anti-screen capture policy, then you can’t capture their screens using any screen-capturing tool.

However, starting from the Citrix Workspace app for Windows 2403 release, the Screen Capture Allow List feature enables you to add an app to the screen capture allow list. This feature enables you to use the allow listed app and capture the screen of the resource enabled with the App Protection Anti-screen capture policy. For more information, see Screen Capture Allow List.

Process exclusion list

When you launch any process or application on your device, App Protection DLLs are injected into each process if the App Protection is enabled. Sometimes, this might cause the process or application not to work due to compatibility issues with the DLL.

Starting from the Citrix Workspace app for Windows 2403 release, you can add any process to the Process exclusion list to avoid the injection of the App Protection DLL into that particular process and recover from any compatibility issues caused by the presence of App Protection DLLs. For more information, see Process exclusion list.

USB Filter Driver Exclusion List

Sometimes, when you’re using specialized external keyboards such as gaming keyboards with the Citrix Workspace app, the App Protection USB Filter Driver might cause compatibility issues and block you from using the keyboard.

Starting from the Citrix Workspace app for Windows 2403 release, the USB Filter Driver Exclusion List feature allows you to exclude any USB device that has compatibility issues with the Citrix Workspace app using the device Vendor ID and Product ID. For more information, see USB Filter Driver Exclusion List.

Security indicator when visiting websites

Citrix Enterprise Browser now displays a security indicator on the address bar when users visit any websites. The indicator aims to inform users about the security aspects of the websites, such as whether it’s an internal site or if there are any potential security restrictions. The indicator provides more information when you click it. The indicator appears on the Enterprise browser by default, and it enhances the user experience.

Security indicator restrictions

Security indicator internal

Citrix Enterprise Browser introduces more settings in the Global App Configuration service

More settings have been added into the Global App Configuration service (GACS) for configuring Citrix Enterprise Browser.

  • Enable autofill address - Allows administrators to enable or disable the autofill suggestions for addresses.
  • Enable autofill credit card - Allows administrators to enable or disable the autofill suggestions for credit card information.
  • Auto launch protocols from origins - Allows administrators to specify a list of protocols that can launch an external app from the listed origins without prompting the user.
  • Enable command-line flag security warnings - Allows administrators to display or hide security warnings, which appear when potentially dangerous command-line flags try to launch the Enterprise Browser.
  • Manage default cookies setting - Allows administrators to manage cookies for a website.
  • Manage default pop-ups setting - Allows administrators to manage pop-ups from a website.
  • Extension install sources - Allows administrators to specify valid sources for users to install extensions, apps, and themes.
  • Disable lookalike warning pages - Allows administrators to specify the preferred domains where lookalike warning pages don’t display when the user visits pages on that domain.
  • Enable payment method query - Allows administrators to enable websites to check whether the users have saved payment methods.
  • Manage saving browser history - Allows administrators to manage the saving of Enterprise browser history.
  • Manage search suggestion - Allows administrators to enable or disable search suggestions in the Enterprise browser’s address bar.
  • Enable export bookmark - Allows administrators to enable an option to export the bookmarks in the Enterprise Browser.
  • Force ephemeral profiles - Allows administrators to clear or persist user profile data when users close the Enterprise Browser.

For more information, see the Manage Citrix Enterprise Browser through Global App Configuration service page in the Citrix Enterprise Browser documentation.

For more information on example JSON data, see Example JSON data.

Citrix Endpoint Analysis

With this release, the EPA Client is bundled with the Citrix Workspace app installer. To install the client, Citrix Workspace app must be installed with the command line option InstallEPAClient.

Example: ./CitrixworkspaceApp.exe InstallEPAClient

Note:

EPA isn’t installed by default.

In this release, the EPA version packaged is 23.11.1.20.

Deprecation of Citrix Workspace app support

Starting from the 2403 release, support for XenApp Services URLs (also known as PNAgent) for connecting to stores is deprecated. Use Citrix Workspace app to connect to stores using the store URL. For reference, see:

Technical Previews in 2403

  • Share system audio

For the complete list of Technical Preview features, see the Features in Technical Preview page.

Legacy documentation

For product releases that have reached End of Life (EOL), see Legacy documentation.

Third-party notices

Citrix Workspace app for Windows might include third-party software licensed under the terms defined in the following document:

Citrix Workspace app for Windows Third-Party Notices (PDF download)

Citrix Workspace™ app 2507 LTSR for Windows
September 8, 2025
Contributed by: 
C S
September 8, 2025
Contributed by: 
C S

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.