Product Documentation

System requirements

Jan 03, 2017

This topic describes the system and user requirements for installing Citrix Receiver for Linux.


  • Linux kernel version 2.6.29 or later, with glibcxx 3.4.15 or later, glibc 2.11.3 or later, gtk 2.20.1 or later, libcap1 or libcap2, and udev support.
  • For the self-service user interface (UI):
    • libwebkit or libwebkitgtk 1.0
    • libxml2 2.7.8
    • libxerces-c 3.1
  • ALSA (libasound2), Speex, and Vorbis codec libraries.
  • At least 20 MB of free disk space for the installed version of Receiver and at least 40 MB if you expand the installation package on the disk. You can check the available disk space by typing the following command in a terminal window:
    df -k
  • At least 1 GB RAM for system-on-a-chip (SoC) devices that use HDX MediaStream Flash Redirection.
  • 256 color video display or higher.
  • TCP/IP networking.


For x86 devices, processor speeds of at least 1.6 GHz display single-monitor sessions well at typical resolutions (for example, 1280 x 1024). If you use the HDX 3D Pro feature, a native hardware accelerated graphics driver and a minimum processor speed of 2 GHz are required.

For ARM devices, a hardware H.264 decoder is required for both general H.264 support and HDX 3D Pro. Performance also benefits from faster processor clock speeds.

HDX MediaStream Flash Redirection

For all HDX MediaStream Flash Redirection requirements, see CTX134786.

Citrix recommends testing with the latest plug-in before deploying a new version to take advantage of the latest functionality and security-related fixes.

HDX RealTime Webcam Video Compression

HDX RealTime Webcam Video Compression requires:
  • A Video4Linux compatible Webcam
  • GStreamer 0.10.25 (or a later 0.10.x version), including the distribution's "plugins-good" package.

HDX MediaStream Windows Media Redirection

HDX MediaStream Windows Media Redirection requires:
  • GStreamer 0.10.25 (or a later 0.10.x version), including the distribution's "plugins-good" package; in general, version 0.10.15 or later is sufficent for HDX MediaStream Windows Media Redirection.
Note: You can download GStreamer from Use of certain codecs may require a license from the manufacturer of that technology. You should consult with your corporate legal department to determine if the codecs you plan to use require additional licenses.

Phillips SpeechMike

If you plan to use Philips SpeechMike devices with Receiver, you may need to install the relevant drivers on the user device. Go to the Philips web site for information and software downloads.

Smart card support

To configure smart card support in Citrix Receiver for Linux, you must have the StoreFront services site configured to allow smart card authentication.


Note: Smart cards are not supported with the XenApp Services site for Web Interface configurations (formerly known as PNAgent), or with the "legacy PNAgent" site that can be provided by a StoreFront server.

Citrix Receiver for Linux supports smart card readers that are compatible with PCSC-Lite and smart cards with PKCS#11 drivers for the appropriate Linux platform. By default Receiver for Linux now locates in one of the standard locations. To ensure Receiver for Linux finds either in a non-standard location or another PKCS#11 driver, store the location in a configuration file using the following steps:

  1. Locate the configuration file: $ICAROOT/config/AuthManConfig.xml
  2. Locate the line <key>PKCS11module</key> and add the driver location to the <value> element immediately following the line.

    Note: If you enter a file name for the driver location, Receiver navigates to that file in the$ICAROOT/PKCS#11 directory. Alternatively, you can use an absolute path beginning with "/".

To configure the behavior of Citrix Receiver for Linux when a smart card is removed, update theSmartCardRemovalAction in the configuration file using the following steps:

  1. Locate the configuration file: $ICAROOT/config/AuthManConfig.xml
  2. Locate the line <key>SmartCardRemovalAction</key> and add 'noaction' or 'forcelogoff' to the<value> element immediately following the line.

The default behaviour is 'noaction'. No action is taken to clear credentials stored and tokens generated with regards to the smart card on the removal on the smart card. The 'forcelogoff' action clears all credentials and tokens within StoreFront on the removal of the smart card.

Citrix Servers

  • XenApp (any of the following products):
    • XenApp 7.9
    • XenApp 7.8
    • XenApp 7.7
    • XenApp 7.6
    • XenApp 7.5
    • XenApp 6.5, Feature Pack 2, for Windows Server 2008 R2
    • XenApp 6.5, Feature Pack 1, for Windows Server 2008 R2
    • XenApp 6.5 for Windows Server 2008 R2
    • XenApp 6 for Windows Server 2008 R2
    • XenApp 5 for Windows Server 2008
  • XenDesktop (any of the following products):
    • XenDesktop 7.9
    • XenDesktop 7.8
    • XenDesktop 7.7
    • XenDesktop 7.6
    • XenDesktop 7.5
    • XenDesktop 7.1
    • XenDesktop 7.0
    • XenDesktop 5.6, Feature Pack 1
    • XenDesktop 5.6
    • XenDesktop 5.5
    • XenDesktop 5
  • VDI-in-a-Box
    • VDI-in-a-Box 5.3
    • VDI-in-a-Box 5.2
  • You can use Citrix Receiver for Linux 13.4 browser-based access in conjunction with StoreFront Receiver for Web and Web Interface, with - or without - the NetScaler Gateway plug-in.


    • StoreFront 3.x, 2.6, 2.5 and 2.1

      Provides direct access to StoreFront stores.

    • StoreFront configured with a Citrix Receiver for Web site

      Provides access to StoreFront stores from a web browser. For the limitations of this deployment, refer to "Important considerations" in Receiver for Web sites.


    Web Interface in conjunction with the NetScaler VPN client:

    • Web Interface 5.4 for Windows web sites.

      Provides access to virtual desktops and apps from a Web browser.

    • Web Interface 5.4 for Linux with XenApp Services or XenDesktop Services sites
  • Ways to deploy Citrix Receiver to users:
    • Enable users to download from, then configure using an email or services address in conjunction with StoreFront.
    • Offer to install from Citrix Receiver for Web site (configured with StoreFront).
    • Offer to install Receiver from Citrix Web Interface 5.4.


  • Mozilla Firefox 18.x (minimum supported version)


Citrix Receiver for Linux supports HTTPS and ICA-over-TLS connections through any one of the following configurations.

  • For LAN connections:
    • StoreFront using StoreFront services or Citrix Receiver for Web sites
    • Web Interface 5.4 for Windows, using Web Interface or XenApp Services sites

    For information about domain-joined and non-domain-joined devices, refer to the XenDesktop 7 documentation.

  • For secure remote or local connections:
    • Citrix NetScaler Gateway 11.1
    • Citrix NetScaler Gateway 11.0
    • Citrix NetScaler Gateway 10.5
    • Citrix NetScaler Gateway 10.1
    • Citrix Access Gateway Enterprise Edition 10
    • Citrix Access Gateway Enterprise Edition 9.x
    • Citrix Access Gateway VPX

    For information about the NetScaler Gateway and Access Gateway versions supported by StoreFront, see StoreFront system requirements.

Note: References to NetScaler Gateway in this topic also apply to Access Gateway, unless otherwise indicated.

About secure connections and certificates

Note: For additional information about security certificates, refer to topics under Secure connections and Secure communications.

Private (self-signed) certificates

If a private certificate is installed on the remote gateway, the root certificate for the organization's certificate authority must be installed on the user device to successfully access Citrix resources using Receiver.

Note: If the remote gateway's certificate cannot be verified upon connection (because the root certificate is not included in the local keystore), an untrusted certificate error appears. The root certificate needs to be installed in the clients certificate store.

Installing root certificates on user devices

For information about installing root certificates on user devices as well as configuring Web Interface for certificate use, see Secure Receiver communication.

Wildcard certificates

Wildcard certificates are used in place of individual server certificates for any server within the same domain. Citrix Receiver for Linux supports wildcard certificates, however they should only be used in accordance with your organization's security policy. In practice, alternatives to wildcard certificates, such as a certificate containing the list of server names within the Subject Alternative Name (SAN) extension, could be considered. Such certificates can be issued by both private and public certificate authorities.

Intermediate certificates and the NetScaler Gateway

If your certificate chain includes an intermediate certificate, the intermediate certificate must be appended to the NetScaler Gateway server certificate. For information, see Configuring Intermediate Certificates.

User requirements

Although you do not need to log on as a privileged (root) user to install the Citrix Receiver for Linux, USB support is enabled only if you are logged on as a privileged user when installing and configuring Receiver. Installations performed by non-privileged users will, however, enable users to access published resources using either StoreFront through one of the supported browsers or using Receiver's native UI.

Check whether your device meets the system requirements

Citrix provides a script,, as part of the Receiver installation package. The script checks whether your device meets all of the system requirements in order to benefit from all of the functionality in Receiver for Linux. The script is located in the Utilities directory of the installation package.

To run the script
  1. Open a terminal window.
  2. Type cd $ICAROOT/util and press ENTER to navigate to the Utilities directory of the installation package.
  3. Type ./ to run the script.