Product Documentation

System requirements

Jun 19, 2017

Supported Operating Systems

Citrix Receiver for Mac supports the following operating systems:

  • macOS Sierra (10.12) 
  • Mac OS X El Capitan (10.11) 
  • Mac OS X Yosemite (10.10)

Note

Mac OS X releases prior to Mac OS X Yosemite are not supported.

Compatible Citrix Products

Citrix Receiver for Mac is compatible with all currently supported versions of the following Citrix products. For information about the Citrix product lifecycle, and to find out when Citrix stops supporting specific versions of products, see the Citrix Product Lifecycle Matrix.

Compatible browsers

Citrix Receiver for Mac is compatible with the following browsers:

  • Safari 7.0 (and later)
  • Mozilla Firefox 22.x (and later)
  • Google Chrome 28.x (and later)

Hardware Requirements

  • 140.7 MB of free disk space
  • A working network or Internet connection to connect to servers
  • Web Interface:
    • Web Interface 5.4 for Windows with XenApp Services (also known as PNAgent Services) sites, for access to applications natively from Citrix Receiver for Mac rather than from a web browser.
  • To deploy Citrix Receiver for Mac:
    • Citrix Receiver for Web 2.1, 2.5 and 2.6
    • Citrix Web Interface 5.4
  • StoreFront:
    StoreFront 2.x or higher for access to applications natively from Citrix Receiver for Mac or from web browser.

Connectivity

If users are running Citrix Receiver for Mac on OS X El Capitan and having trouble connecting, upgrade the NetScaler Gateway plugin. For more information, see the article NetScaler Gateway Plug-in v3.1.4 for Mac OS X (El Capitan Support) on the Citrix downloads page.

Citrix Receiver for Mac supports the following connections to XenApp or XenDesktop:

  • HTTP
  • HTTPS
  • ICA-over-TLS

Citrix Receiver for Mac supports the following configurations:

For LAN connections For secure remote or local connections
  • StoreFront using StoreFront services or Citrix Receiver for Mac for Web site
  • Web Interface 5.4 for Windows, using XenApp Services sites

Citrix NetScaler Gateway:

  • 11.1 including VPX
  • 11.0 including VPX
  • 10.5 including VPX
  • Enterprise Edition 10.x including VPX
  • Enterprise Edition 9.x including VPX
  • VPX

Citrix Secure Gateway 3.x (for use with Web Interface only)

For information about deploying NetScaler Gateway with StoreFront, see the NetScaler Gateway documentation, and the StoreFront documentation.

Authentication

For connections to StoreFront, Citrix Receiver for Mac supports the following authentication methods:
  Receiver for Web using browsers StoreFront Services site (native) StoreFront XenApp Services site (native) NetScaler to Receiver for Web (browser) NetScaler to StoreFront Services site (native)
Anonymous Yes Yes      
Domain Yes Yes   Yes* Yes*
Domain pass-through          
Security token       Yes* Yes*
Two-factor (domain with security token)       Yes* Yes*
SMS       Yes* Yes*
Smart card** Yes     Yes*  
User certificate       Yes Yes (NetScaler Gateway Plugin)

*Available only for Receiver for Web sites and for deployments that include NetScaler Gateway, with or without installing the associated plug-in on the device.

**To use smart cards on OS X 10.10, you must have a least OS X 10.10.2 installed.

For connections to the Web Interface 5.4, Citrix Receiver for Mac supports the following authentication methods:
Note: Web Interface uses the term Explicit to represent domain and security token authentication.
  Web Interface (browsers) Web Interface XenApp Services site NetScaler to Web Interface (browser) NetScaler to Web Interface XenApp Services site
Anonymous Yes      
Domain Yes Yes Yes Yes
Domain pass-through        
Security token     Yes* Yes
Two-factor (domain with security token)     Yes* Yes
SMS     Yes* Yes
Smart card** Yes   Yes  
User certificate     Yes (Require NetScaler Gateway Plugin) Yes (Require NetScaler Gateway Plugin)

* Available only in deployments that include NetScaler Gateway, with or without installing the associated plug-in on the device.

Requirements for smart card authentication

Citrix Receiver for Mac supports smart card authentication in the following configurations:

  • Smart card authentication to Receiver for Web/StoreFront 2.x and newer, and XenDesktop 7.1 and newer or XenApp 6.5 and newer using browser-based access.
  • Smart card-enabled applications, such as Microsoft Outlook and Microsoft Office, allow users to digitally sign or encrypt documents available in virtual desktop or application sessions.
  • With multiple certificates— Citrix Receiver for Mac supports using multiple certificates with a single smart card or with multiple smart cards. When your user inserts a smart card into a card reader, the certificates are available to all applications running on the device, including Citrix Receiver for Mac.
  • In double-hop sessions—if a double-hop is required, a further connection is established between Citrix Receiver for Mac and your user's virtual desktop.

About smart card authentication to NetScaler

When using a smart card to authenticate a connection when there are multiple usable certificates on the smart card, Citrix Receiver for Mac prompts you to select a certificate. Upon selecting a certificate, Citrix Receiver for Mac prompts you to enter the smart card password; once authenticated, the session launches.

If there is only one suitable certificate on the smart card, Citrix Receiver for Mac uses that certificate and will not prompt you to select it. However, you must still enter the password associated with the smart card to authenticate the connection and to start the session.

Specifying a PKCS#11 module for smart card authentication

Note: Installing PKCS#11 module is not mandatory.

To specify PKCS#11 module for smart card authenticaiton:

  1. In Citrix Receiver, select Preferences.
  2. Click Security & Privacy.
  3. In the Security & Privacy section, click Smart Card.
  4. In the PKCS#11 field, select the appropriate module; click Other to browse to the location of the PKCS#11 module if the desired one is not listed. 
  5. After selecting the appropriate module, click Add.

Supported readers, middleware, ans smart card profiles

Citrix Receiver for Mac supports most Mac OS X compatible smart card readers and cryptographic middleware. Citrix has validated operation with the following.

Supported readers:

  • Common USB connect smart card readers

Supported middleware:

  • Clariify
  • Activeidentity client version
  • Charismathics client version

Supported smart cards:

  • PIV cards
  • Common Access Card (CAC)
  • Gemalto .NET cards

Follow the instructions provided by your vendor’s Mac OS X compatible smart card reader and cryptographic middleware for configuring user devices.

Restrictions

  • Certificates must be stored on a smart card, not on the user device.
  • Citrix Receiver for Mac does not save the user certificate choice.
  • Citrix Receiver for Mac does not store or save the user’s smart card PIN. PIN acquisitions is handled by the OS, which may have its own caching mechanism.
  • Citrix Receiver for Mac does not reconnect sessions when a smart card is inserted.
  • To use VPN tunnels with smart card authentication, users must install the NetScaler Gateway Plug-in and log on through a web page, using their smart cards and PINs to authenticate at each step. Pass-through authentication to StoreFront with the NetScaler Gateway Plug-in is not available for smart card users.