System requirements and compatibility
System requirements
As a prerequisite, make sure that you have installed the Citrix Workspace app using administrator rights.
Minimum versions of Citrix components
- Citrix Workspace app 24.9.0 for iOS
- Citrix Workspace app 2108 for Linux
- Citrix Workspace app 2203.1 LTSR for Windows
- Citrix Workspace app 2002 for Windows
- Citrix Workspace app 2305.1 for Windows (Store)
- Citrix Workspace app 2001 for Mac
- Citrix Workspace app 24.7.0 for Android
- StoreFront 1912 LTSR
- Delivery Controller 1912
- Valid Citrix licenses. For more information, contact your Citrix Sales Representative or Citrix Partner.
Note:
If the users are on devices or Workspace app versions that don’t support App Protection, then they can’t access the protected resources. The protected resources include Virtual Apps and Desktops and Web and SaaS apps.
Licenses
The following section explains the different types of licenses available for App Protection based on the products, platforms, and use cases.
IT-managed VDI
For all editions of IT-managed VDI, App Protection is available as an add-on. For more information, see IT-managed VDI.
Citrix DaaS for Hyperscalers
Citrix DaaS
In the Feature Matrix for Citrix DaaS article, navigate to DaaS cloud Services > Security and Monitoring > App Protection.
Citrix Secure Private Access
App Protection is available as a standalone attachment for Citrix Secure Private Access. For more information, navigate to Citrix cloud services > Citrix Secure Private Access in the Service descriptions for Citrix Services article.
Citrix Universal subscription
App Protection is included with the following services:
- Citrix Universal Premium
- Citrix Universal Premium Plus
It is available as an add-on with the following editions:
- Citrix Universal Advanced
- Citrix Universal Advanced Plus
For more information, see this article.
Operating system platforms
App Protection policies runtime is installed on the endpoint that you are connecting from and not on the VDA you are connecting to. So, only the operating system version of the endpoint is significant. (App Protection can connect to VDAs hosted on any supported operating systems described in Citrix Virtual Apps and Desktops System requirements.)
The App Protection feature is supported on endpoints running the following operating systems:
-
Windows:
- Windows 11 (64-bit Edition)
- Windows 10 (32-bit and 64-bit Editions)
Note:
App Protection isn’t supported on the devices with Arm64 edition of the Windows operating system.
-
macOS:
- High Sierra (10.13) or higher
-
Linux:
- 64-bit Ubuntu 22.04
- 64-bit Ubuntu 24.04
- 64-bit RHEL 9
- ARM64 Raspberry Pi OS (Debian 11 Bullseye, Debian 12 Bookworm)
Note:
App Protection supports Ubuntu 24.04 and Raspberry Pi OS (Debian 12 Bookworm) starting with Citrix Workspace app Linux 2411 or higher.
-
Android
- Android 12
- Android 13
- Android 14
Note:
For App Protection, Citrix Workspace app for Linux requires a Gnome Display Manager along with the supported operating systems.
Compatibility matrix
Compatibility matrix for Citrix Cloud based products
App Protection features compatible with Citrix Cloud based products are as follows:
| Feature | Citrix Cloud | Citrix Cloud Japan |
|---|---|---|
| Anti-keylogging and Anti-screen capture for virtual apps and desktops | Yes | Yes |
| Anti-keylogging and Anti-screen capture for web or SaaS apps | Yes | No |
| Anti-DLL for Windows | Yes | Yes through Group Policy Object (GPO) |
| Anti-DLL Allow Listing | Yes | Yes through GPO |
| Global App Configuration service (GACS) | Yes | No |
| Authentication or Self-Service plug-in screen protection for Linux | Yes | Yes through AuthManConfig.xml |
| Authentication or Self-Service plug-in screen protection for Mac | Yes through GACS | Yes through GACS |
| Authentication or Self-Service plug-in screen protection for Windows | Yes | Yes through GPO |
| CAS App Protection ScreenShot events | Yes | No |
| Contextual App Protection | Yes | Yes based on the user |
| Policy Tampering Detection | Yes | Yes |
| App Protection Posture Check | Yes | Yes |
| Local App Allowlisting or Filter - Windows | Yes | Yes through GPO |
| Local App Protection - Windows | Yes | Yes through GPO |