What’s new
Enhanced support for Smart Cards and Yubikeys
The Smart Card Reader properties now detect real-time changes and include the following new properties:
-
ATR – The Answer To Reset (ATR) of any smart card confirming to the ISO 7816 standard.
-
Vendor – The vendor of the smart card reader.
Additionally, a new User property has been added:
- Auth Credential Provider - The name of the credential provider used to authenticate the user.
A new Remote -> Compliance Check -> Smart Card Removal template has been added that uses these properties to trigger a deny access screen within a virtual session, whenever a smart card was used to authenticate a session and the smart card is subsequently removed.
Dynamic enablement of App Protection Anti-Screen Capture
Support for the dynamic enablement of App Protection’s Anti-Screen Capture technology has been added as a new task. This task enables Anti-Screen Capture on the remote device on Microsoft Windows endpoints. If there is a failure to enable Anti-Screen Capture, such as when using an older release or an unsupported platform, the administrator can choose to Deny Access, Log-off or Disconnect the virtual session.

Support for deviceTRUST Client Extension on native Windows ARM64 devices (Technical Preview)
The deviceTRUST Client Extension now natively supports ARM64 processor architecture on Microsoft Windows. This feature will remain in Technical Preview until the next release.
Support for USER_SID and SESSION_ID variables within Windows Registry properties
Support for variable substitution of %USER_SID% and %SESSION_ID% have been added to the variable expansion of all text fields, including Windows Registry properties. This allows registry values to be queried when they are nested below one of these variables.
-
%USER_SID%is replaced with the user’s Security Identifier, such as S-1-2-3-4. -
%SESSION_ID%is replaced with session id of the virtual session, such as 2, 3 or 4.
Citrix Workspace app iOS and Android
The deviceTRUST Client Extension is now natively integrated into Citrix Workspace app for iOS and Android.
Other Changes
-
A new transition operator has been added to an action sequence to handle transitions from one context value to another.
-
The deviceTRUST Console now depends upon the Microsoft Edge WebView2 runtime. This runtime is automatically installed on recent operating systems, and is available as a separate download on older operating systems.
-
Mobile settings have been removed from the deviceTRUST Console and the deviceTRUST iOS Portal will be deprecated once all customers have moved off this service, and onto the newer Citrix Workspace app for iOS.
-
The deviceTRUST Client Extension for macOS now requires a minimum supported operating system version of macOS Sonoma v14.
In this article
- Enhanced support for Smart Cards and Yubikeys
- Dynamic enablement of App Protection Anti-Screen Capture
- Support for deviceTRUST Client Extension on native Windows ARM64 devices (Technical Preview)
- Support for USER_SID and SESSION_ID variables within Windows Registry properties
- Citrix Workspace app iOS and Android
- Other Changes