Product Documentation

System requirements

May 12, 2015

This topic describes the system and user requirements for installing Citrix Receiver for Linux.


  • Linux kernel version 2.6.29 or later, with glibcxx 3.4.15 or later, glibc 2.11.3 or later, gtk 2.20.1 or later, libcap1 or libcap2, and udev support.
  • For the self-service user interface (UI):
    • libwebkit or libwebkitgtk 1.0
    • libxml2 2.7.8
    • libxerces-c 3.1
  • ALSA (libasound2), Speex, and Vorbis codec libraries.
  • At least 20 MB of free disk space for the installed version of Receiver and at least 40 MB if you expand the installation package on the disk. You can check the available disk space by typing the following command in a terminal window:
    df -k
  • At least 1 GB RAM for system-on-a-chip (SoC) devices that use HDX MediaStream Flash Redirection.
  • 256 color video display or higher.
  • TCP/IP networking.


For x86 devices, processor speeds of at least 1.6 GHz display single-monitor sessions well at typical resolutions (for example, 1280 x 1024). If you use the HDX 3D Pro feature, a native hardware accelerated graphics driver and a minimum processor speed of 2 GHz are required.

For ARM devices, a hardware H.264 decoder is required for both general H.264 support and HDX 3D Pro. Performance also benefits from faster processor clock speeds.

HDX MediaStream Flash Redirection

For all HDX MediaStream Flash Redirection requirements, see CTX134786.

The version of the Adobe Flash plug-in running on the user device must be either the same as or later than the version running on the XenApp or XenDesktop server to support client-side rendering. If this is not the case, only server-side rendering is available.

Citrix recommends always upgrading to the latest version of the plug-in to obtain the latest functionality and security-related fixes.

HDX RealTime Webcam Video Compression

HDX RealTime Webcam Video Compression requires:
  • A Video4Linux compatible Webcam
  • GStreamer 0.10.25 (or a later 0.10.x version), including the distribution's "plugins-good" package.

HDX MediaStream Windows Media Redirection

HDX MediaStream Windows Media Redirection requires:
  • GStreamer 0.10.25 (or a later 0.10.x version), including the distribution's "plugins-good" package; in general, version 0.10.15 or later is sufficent for HDX MediaStream Windows Media Redirection.
Note: You can download GStreamer from Use of certain codecs may require a license from the manufacturer of that technology. You should consult with your corporate legal department to determine if the codecs you plan to use require additional licenses.

Phillips SpeechMike

If you plan to use Philips SpeechMike devices with Receiver, you may need to install the relevant drivers on the user device. Go to the Philips web site for information and software downloads.

Smart card support

To configure smart card support in Receiver for Linux, you must have the StoreFront services site configured to allow smart card authentication.
Note: Smart cards are not supported with the XenApp Services site for Web Interface configurations (formerly known as PNAgent), or with the "legacy PNAgent" site that can be provided by a StoreFront server.
Receiver for Linux supports smart card readers that are compatible with PCSC-Lite and smart cards with PKCS#11 drivers for the appropriate Linux platform. To ensure Receiver for Linux locates the PKCS#11 driver, store the location in a configuration file using the following steps:
  1. Locate the configuration file: $ICAROOT/config/AuthManConfig.xml
  2. Locate the line <key>PKCS11module</key> and add the driver location to the <value> element immediately following the line.
    Note: If you enter a file name for the driver location, Receiver navigates to that file in the $ICAROOT/PKCS#11 directory. Alternatively, you can use an absolute path beginning with "/".
To configure the behavior of Citrix Receiver for Linux when a smart card is removed, update the SmartCardRemovalAction in the configuration file using the following steps:
  1. Locate the configuration file: $ICAROOT/config/AuthManConfig.xml
  2. Locate the line <key>SmartCardRemovalAction</key> and add 'noaction' or 'forcelogoff' to the <value> element immediately following the line.

The default behaviour is 'noaction'. No action is taken to clear credentials stored and tokens generated with regards to the smart card on the removal on the smart card. The 'forcelogoff' action clears all credentials and tokens within StoreFront on the removal of the smart card.

Availability of Receiver for Linux 13.2 Technology Preview features

In order for your users to experience the Citrix Receiver Technology Preview features, they must connect to stores hosted on StoreFront 3.0 Technology Preview servers.

Some of the features and functionality of Receiver are available only when connecting to newer versions of XenApp and XenDesktop and may also require the latest hotfixes for those products.

Citrix Servers

  • XenApp (any of the following products):
    • Citrix XenApp 7.6
    • Citrix XenApp 7.5
    • Citrix XenApp 6.5, Feature Pack 2, for Windows Server 2008 R2
    • Citrix XenApp 6.5, Feature Pack 1, for Windows Server 2008 R2
    • Citrix XenApp 6.5 for Windows Server 2008 R2
    • Citrix XenApp 6 for Windows Server 2008 R2
    • Citrix XenApp 5 for Windows Server 2008
    • Citrix XenApp 4, feature pack 2, for Unix operating systems
  • XenDesktop (any of the following products):
    • XenDesktop 7.6
    • XenDesktop 7.5
    • XenDesktop 7.1
    • XenDesktop 7.0
    • XenDesktop 5.6, Feature Pack 1
    • XenDesktop 5.6
    • XenDesktop 5.5
    • XenDesktop 5
  • Citrix VDI-in-a-Box
    • VDI-in-a-Box 5.3
    • VDI-in-a-Box 5.2
  • You can use Citrix Receiver for Linux 13.3 browser-based access in conjunction with StoreFront Receiver for Web and Web Interface, with - or without - the NetScaler Gateway plug-in.


    • StoreFront 3.0.x, 2.6, 2.5 and 2.1

      Provides direct access to StoreFront stores.

    • StoreFront configured with a Citrix Receiver for Web site

      Provides access to StoreFront stores from a web browser. For the limitations of this deployment, refer to "Important considerations" in Receiver for Web sites.

    Web Interface in conjunction with the NetScaler VPN client:

    • Web Interface 5.4 for Windows web sites.

      Provides access to virtual desktops and apps from a Web browser.

    • Web Interface 5.4 for Linux with XenApp Services or XenDesktop Services sites

  • Ways to deploy Citrix Receiver to users:
    • Enable users to download from, then configure using an email or services address in conjunction with StoreFront.
    • Offer to install from Citrix Receiver for Web site (configured with StoreFront).
    • Offer to install Receiver from Citrix Web Interface 5.4.
    • Deploy using Active Directory (AD) Group Policy Objects (GPOs).
    • Deploy using Microsoft System Center 2012 Configuration Manager.



Citrix Receiver for Linux supports HTTPS and ICA-over-TLS connections through any one of the following configurations.

  • For LAN connections:
    • StoreFront using StoreFront services or Citrix Receiver for Web sites
    • Web Interface 5.4 for Windows, using Web Interface or XenApp Services sites

    For information about domain-joined and non-domain-joined devices, refer to the XenDesktop 7 documentation.

  • For secure remote or local connections:
    • Citrix NetScaler Gateway 10.5
    • Citrix NetScaler Gateway 10.1
    • Citrix Access Gateway Enterprise Edition 10
    • Citrix Access Gateway Enterprise Edition 9.x
    • Citrix Access Gateway VPX

    Windows domain-joined, managed devices (local and remote, with or without VPN) and non-domain joined devices (with or without VPN) are supported.

    For information about the NetScaler Gateway and Access Gateway versions supported by StoreFront, seeStoreFront system requirements.

Note: References to NetScaler Gateway in this topic also apply to Access Gateway, unless otherwise indicated.

About secure connections and certificates

Note: For additional information about security certificates, refer to topics under Secure connections and Secure communications.

Private (self-signed) certificates

If a private certificate is installed on the remote gateway, the root certificate for the organization's certificate authority must be installed on the user device to successfully access Citrix resources using Receiver.

Note: If the remote gateway's certificate cannot be verified upon connection (because the root certificate is not included in the local keystore), an untrusted certificate warning appears. If a user chooses to continue through the warning, a list of apps is displayed but the apps will not start.

Installing root certificates on user devices

For information about installing root certificates on user devices as well as configuring Web Interface for certificate use, see Secure Receiver communication.

Wildcard certificates

Wildcard certificates are used in place of individual server certificates for any server within the same domain. Citrix Receiver for Linux supports wildcard certificates, however they should only be used in accordance with your organization's security policy. In practice, alternatives to wildcard certificates, such as a certificate containing the list of server names within the Subject Alternative Name (SAN) extension, could be considered. Such certificates can be issued by both private and public certificate authorities.

Intermediate certificates and the NetScaler Gateway

If your certificate chain includes an intermediate certificate, the intermediate certificate must be appended to the NetScaler Gateway server certificate. For information, see Configuring Intermediate Certificates.

User requirements

Although you do not need to log on as a privileged (root) user to install the Citrix Receiver for Linux, USB support is enabled only if you are logged on as a privileged user when installing and configuring Receiver. Installations performed by non-privileged users will, however, enable users to access published resources using either StoreFront through one of the supported browsers or using Receiver's native UI.

Check whether your device meets the system requirements

Citrix provides a script,, as part of the Receiver installation package. The script checks whether your device meets all of the system requirements in order to benefit from all of the functionality in Receiver for Linux. The script is located in the Utilities directory of the installation package.

To run the script
  1. Open a terminal window.
  2. Type cd $ICAROOT/util and press ENTER to navigate to the Utilities directory of the installation package.
  3. Type sh to run the script.