Fixed issues

Last published : Oct 19, 2026
Related information
About this release

Citrix Workspace app 2203.1 LTSR CU6 Hotfix 2 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU6 Hotfix 1

Security issues

This fix addresses a security issue for CVE-2024-6286. For more information, see Knowledge Center article CTX678036. .

Citrix Workspace app 2203.1 LTSR CU6 Hotfix 1 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU6
  • You might experience launch failure as wfica32.exe stops responding when using Citrix Workspace app for Windows version 2203.1 LTSR CU6.
  • Custom virtual driver keys might not be retained on uninstalling Citrix Workspace app for Windows.

Citrix Workspace app 2203.1 LTSR CU6 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU5

Session/ Connection

  • If connection lease was enabled for cloud store, Citrix Workspace app for Windows starts sessions successfully even after the session limit is exceeded.
  • qlaunch might fail for the first time when selfservicemode is set to false.
  • If WPAD proxy setting are configured on a client machine when session reliability takes place, wfica32.exe process stops responding.
  • If the ICA® file or the folder where the ICA file is present is named with Unicode characters, you might fail to start sessions. This issue occurs only in hybrid launch.
  • Citrix Workspace app for Windows 2212 version might fail to follow the conditions set in the proxy PAC file.

User Experience

  • When you change the store configuration using the Group Policy Object Template or using the command-line, you might notice a white screen.
  • The refresh functionality might fail with custom domain cloud stores.
  • When multiple accounts are configured through GPO and you activate any disabled account, Citrix Workspace app always switches to all accounts view instead of the selected single account.
  • If you have Google Japanese IME enabled with Citrix IME Best experience mode, you might not be able to delete textboxes in PowerPoint using the delete key.
  • If a full screen HDX™ session is on focus, and endpoint is locked using Ctrl+Alt+Del, users might be unable to type anything after unlocking.
  • You might notice that the app opens even after closing Citrix Workspace app when you highlight an app using the tab, then Citrix Workspace app, and then press Enter.

System exceptions

  • On upgrading the VDA to Citrix Virtual Apps and Desktops 2308 or later, Citrix Workspace app might stop responding when launching seamless published application windows.
  • In Non English client machines, if the published application has an Unicode title, wfica32.exe is not compatible with the Analytics components.

Seamless Windows

  • If you move an application to another monitor and minimize it, the application might not open properly in the maximized view. You can try closing the application and opening it again.

Installing, Uninstalling, Upgrading

  • Custom virtual driver keys might not be retained on uninstalling Citrix Workspace app.

Client device Issues

  • Any Composite device like Bloomberg Keyboard 5 Biometric Module might fail to connect automatically even when automatic redirection of client USB devices is on.

User Interface

  • Citrix Workspace might fail to enumerate the published resources for a brief period of time when connecting to a Global server load balancing (GSLB) URL. This issue occurs when the established StoreFront server encounters any issues that cause a GSLB controlled Virtual IP (VIP) address change in the endpoint.
  • You might fail to add a store when the top-level-domain (TLD) of the store URL is less than two characters or when there is no TLD.

Logon/Authentication

  • Citrix Workspace app with SAML2 and FAS authentication might fail to sign in automatically on session unlock even when the WSCReconnectMode for Workspace control is set to reconnect on Windows sign-on and the Silent authentication to Citrix Workspace policy is enabled.

Citrix Workspace app 2203.1 LTSR CU5 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU4

HDX Plug and Play

  • Setting new and existing USB devices to deny the following prompt might still appear:
    Citrix Workspace has detected one or more devices connected to your computer. To connect the devices to your session, click here.

Installing, Uninstalling, Upgrading

  • After restarting a client endpoint, the periodic auto update check before you sign in might fail.
  • After Citrix Workspace app installation completes, you might get a fatal error prompt when configuring a store using GPO or the command line.

Keyboard

  • In a double-hop scenario, the Alt+Tab key might not work on macOS clients.

Session/Connection

  • When you connect to a desktop using Cache Redirection mode and if ADC High Availability fails, you might not be able to reconnect to a desktop using Cache Redirection mode.
  • You might fail to start Citrix Workspace app using the API from ICO SDK after upgrading to a newer version.
  • When the self-service mode is set to False and the desktop lock feature is enabled, you might fail to add a store and might fail to start a desktop.
  • Published application content might appear frozen for some users randomly. The issue occurs when the TCP connection is established before the UDP connection and EDT MTU discovery isn't triggered when switching over from TDP to UDP.
  • When you log off from an endpoint, the wfica32.exe process might become unresponsive and block the logoff.

User Experience

  • You might not be able to sign in to Citrix Workspace app using a single sign-on or might not see the authentication prompt in cloud stores. The issue occurs when the account is configured through the GPO or command line for the first time and when the self-service mode is set to false and the Silent authentication to Citrix Workspace policy is enabled.
  • Citrix VPN might log off when you log off from Citrix Workspace app even when the VPN has been decoupled with the DisableIconHide registry value, which is set to 1.
  • The store account addition might take a long time, or it might fail on the endpoint with no internet access or when the Global App Config Server is unreachable.
  • The SelfService executable might run even though no account is added in the Citrix Workspace app.

User Interface

  • When you open a published desktop with Unicode characters, the Desktop Viewer name might appear garbled. The issue occurs only with Internet Explorer (IE) mode in Microsoft Edge.

Citrix Workspace app 2203.1 LTSR CU4 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU3

Content Redirection

  • With the fix, you can prevent ping check and allow auto redirect URL in a host to client redirection.
    • To prevent ping check in a host to client redirection, set the following registry key:
      HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Citrix/ICA Client/SFTA
      Name: OverridePingCheck
      Type: REG_DWORD
      Value: 1
    • To allow auto redirect URL in host to client redirection, set the following registry key:
      HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Citrix/ICA Client/SFTA
      Name: OverridePreventAutoRedirect
      Type: REGREG_DWORD
      Value: 1

Installing, Uninstalling, Upgrading

  • Attempts to upgrade Citrix Workspace app for Windows version 1912 CU2 or earlier installed with the Enable app protection option might fail with this error message:
    Service 'AppProtection Service'(entryprotectsvc) failed to start. Verify that you have sufficient privileges to start system services.
  • The CitrixReceiverUpdater.exe command might fail to update Autoupdate settings like AutoUpdateStream, if the auto update settings were changed earlier from Advance Preferences > Citrix Workspaces Updates.

Session/Connection

  • There might be a delay in adding a store due to certificate revocation check requests for the store's certificate. As a workaround, you can skip checking certificate revocation using the following registry:
    • HKEY_LOCAL_MACHINE/Software/wow6432node/Citrix/Receiver
      Name: SkipStoreCertificateRevocationCheck
      Type: DWORD
      Value: 1
      Or
    • HKEY_CURRENT_USER/Software/Citrix/Receiver
      Name: SkipStoreCertificateRevocationCheck
      Type: DWORD
      Value: 1
  • The session might disconnect if you click the Desktop Viewer and resize a published desktop continuously.
  • Attempts to reconnect to certain non-English language desktop versions using Auto Client Reconnect might fail with an error message.
  • Thinwire full-screen H.265 might fall back to H.264 with Citrix Workspace app 2203.1 LTSR CU3 for Windows.

System Exceptions

  • The msedgewebview2.exe process can cause high CPU usage when selfservice is running.
  • The wfica32.exe process might exit unexpectedly during a user session with HDX webcam redirection.
  • The wfica32.exe process might exit unexpectedly when the session is shutting down.

User Experience

  • The desktop shortcut settings per application might take high precedence by default. Also, setting the desktop shortcuts to False on the client side might not take effect. With this fix and by setting the following registry key, the client-side desktop shortcut settings override the desktop shortcut settings per application.
    Set the following registry key to override the desktop shortcut settings:
    HKEY_LOCAL_MACHINE\Software\Citrix\Dazzle
    Name: ProviderSettingOverride
    Type: REG_SZ
    Value: True
  • In high latency environments, a jittery movement might be observed in the mouse cursor on Citrix Workspace app when the Use relative mouse setting is enabled.
    To enable the fix, modify the default.ica file in StoreFront at C:\inetpub\wwwroot\Citrix\Store\App_Data\default.ica.
    Add RelMouseSyncTimeout=xxx(min 10 to max 1000) to the [WFClient] section.
    Or
    Set the following registry key on the endpoint:
    HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\ICA Client\Engine\Configuration\Advanced\Modules\WFClient
    Name: RelMouseSyncTimeout
    Type: STRING
    Value: The minimum value is 10 and the maximum value is 1000
  • Attempts to copy and paste .msg files from local Microsoft Outlook to a published explorer might fail.

User Interface

  • When you sign in to the Citrix Workspace app, apps and desktops corresponding to multiple accounts configured through GPO or the command line might not be displayed. This issue occurs when the registry key value of CurrentAccount is set to AllAccount at Computer\HKEY_LOCAL_MACHINE\Software\wow6432Node\Citrix\Dazzle.
  • You might get the following error message when the AllowAddStore parameter is set to N value and an HTTP store is added using a Group Policy Object (GPO) or command line interface:
    Unable to connect to the server.
  • For cloud stores, you might fail to add an account using redirect URLs.
  • You might see a store name different than the name that you’ve provided on Citrix Workspace app.
  • After upgrading to Citrix Workspace app for Windows 2203 LTSR, you might see a white screen. This issue occurs when you add and configure a store for the first time and simultaneously refresh and open the self-service UI.

Citrix Workspace app 2203.1 LTSR CU3 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU2

Client Device Issues

  • If the Generic USB RemoveOnLock policy value contains upper-case letters, the policy might fail to disconnect the USB device (for example, Signature pads) in a locked client.

HDX Realtime

  • When a Microsoft Outlook reminder appears during a Microsoft Teams call, a black square is displayed on the shared screen of Microsoft Teams.

Installing, Uninstalling, Upgrading

  • The Local App Access feature might fail to work for user devices installed with the Italian language operating system.
  • Attempts to install Citrix Workspace app might fail on Windows Server 2012 R2. For more information, see Knowledge Center article CTX477888.

Keyboard

  • When you press and hold the PrtSc key, the server-side published application might receive VK_SNAPSHOT WM_KEYUP events (screen snapshots taken) continuously.

Logon/Authentication

  • With the Selfservicemode set to false, the stores added might not be refreshed correctly after opening Citrix Workspace app. As a result, the authentication window fails to appear.
  • The inactivity timeout value might not expire if you exit from the Citrix Workspace app before reaching the set time-out value. As a result, you might later be able to start Citrix Workspace app without entering any credentials.
  • Attempts to enumerate applications using the storebrowse command might fail if the Citrix Gateway URL used is **.\storebrowse.exe -U {Username} -P {Password} -D {Domain} -M 0x2000 -E {NSG_URL}.

Seamless Windows

  • In a seamless session, the mouse and keyboard of the user device might freeze intermittently, if the application disables and then enables its window in that sequence.
  • When you use the Windows Aero snap feature to move a maximized window from one monitor to a larger monitor running Windows 11, the session might disappear.
  • When you open a published app in seamless mode, other local or seamless apps might appear in the foreground and cover the published app.
  • A published application might open in a non-visible state when you start the application.

Session/Connection

  • COM port redirection might be blocked during session roaming.
  • With the Use relative mouse setting enabled in a user session, the left click might not work on the trackpad.
  • In an isolated environment, Citrix Workspace app might attempt to connect to the Global App Config server even if the Global App Config Service policy is disabled through GPO. This causes a delay while adding an account.
  • Citrix Analytics is unable to receive network-related metrics from end users. This issue occurs even when these prerequisites are met:
    • App or desktop sessions are in running state for more than 15 minutes using Citrix Workspace app.
    • Store or account used is CAS enabled.
    Note:
    Network-related CAS events are not sent for browser-based launch of apps or desktops. It’s sent only when you open an app or a desktop via web and from the same store that is added via native Citrix Workspace app.
  • Sometimes the published apps running on a published desktop might fail to start and Citrix Workspace app becomes unresponsive.
  • Attempts to access Citrix Workspace app for Windows might fail when the VPN disconnects or reconnects.
  • The Windocker.exe process might incorrectly generate outbound network requests to multiple IP addresses.
  • Using auto client reconnect might delay connecting to a session.
  • When you attempt to configure multiple stores through a Group Policy Object (GPO) or command line, one of the stores might not be fully configured.
  • Citrix Analytics file download events such as file name and file path attributes might be empty.

System Exceptions

  • When you start a published application with the Adaptive Audio policy enabled, the wfica32 process might exit unexpectedly.
  • Some binaries of Citrix Workspace app might be unsigned resulting in security issues.

User Experience

  • When you minimize and maximize a desktop, the toolbar location might not be retained.
  • When you disconnect and reconnect to a session that is set to full-screen mode, the toolbar location might not be retained.
  • You might experience delay in enumerating apps and starting apps or desktops when using SSON in an environment that has no active access to external sites. This issue occurs from the Citrix Workspace app version 2210.5 onwards and from the Citrix Workspace app version 2203 CU2 onwards.

User Interface

  • You might fail to add a hidden store to the Citrix Workspace app. This issue occurs when you try to add Citrix Gateway FQDN that requires smartcard authentication or when the StoreFront store name has spaces, for example, https://servername.company.com?Store Service.
  • After a store is added with the store authentication token set to true, Citrix Workspace might become unresponsive at the white screen and the store authentication token is set to false.
  • The screen might display the authentication pop-up window on the upper left corner instead of displaying on the center.
  • The WebView status bar might appear at the bottom of Citrix Workspace app when you hover the mouse over any published app or desktop icon.
  • When you open a native Citrix Workspace app and right-click on the self-service UI, a context menu might appear.

Citrix Workspace app 2203.1 LTSR CU2 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR CU1

Installing, Uninstalling, Upgrading

  • When you install Citrix Workspace app as a system user using certain third-party applications, incorrect error messages might appear in the installation logs.

Keyboard

  • On a Surface Pro device, when you choose the on-screen keyboard on the Desktop Viewer, the keyboard might not appear.

Logon/Authentication

  • With this fix, you can suppress the webview authentication prompt while using the single sign-on authentication.
    To enable the fix, set the following registry key:
    HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Citrix/AuthManager or HKEY_CURRENT_USER/SOFTWARE/Wow6432Node/Citrix/AuthManager
    Name: HideAuthPrompt
    Type: REG_SZ
    Value: True

Session/Connection

  • Citrix Workspace app version 2109 and later might ignore the default.ica file settings on the StoreFront server.
  • When you configure a default internal beacon as the StoreFront store URL (for example, https://example.com/Citrix/Store/discovery) in Citrix Workspace app, the HTTP HEAD requests sent to these URLs might result in 404 errors.
  • Attempts to start a published application through Citrix Workspace app on an endpoint with more than eight monitors might fail with the following error message:
    This version of Workspace doesn't support the selected encryption. Please contact your administrator.
  • If the browser name (BrowserName) of a published application contains multibyte characters, the application might fail to launch. The issue occurs on Internet Explorer version 11 and Microsoft Edge opened in Internet Explorer mode.
  • When using Citrix Workspace app for Windows 2106 or later, the Outbound ICA Proxy feature might not work.
  • Citrix Workspace app prompts you to select a certificate even when only one certificate exists. This issue occurs while authenticating to the Workspace (cloud) store.
    You can suppress this certificate prompt by adding the following registry:
    • On 32-bit systems:
      HKEY_LOCAL_MACHINE/SOFTWARE/Citrix/Dazzle or HKEY_CURRENT_USER/SOFTWARE/Citrix/Dazzle
      Name: SuppressCertSelectionPrompt
      Type: REG_SZ
      Value: True
    • On 64-bit systems:
      HKEY_LOCAL_MACHINE/Software/Wow6432Node/Citrix/Dazzle or HKEY_CURRENT_USER/Software/Wow6432Node/Citrix/Dazzle
      Name: SuppressCertSelectionPrompt
      Type: REG_SZ
      Value: True
  • If Client USB device redirection is disabled in an existing session and you start a new session with the redirection enabled, the redirection might not work.

System Exceptions

  • Citrix Authentication Manager (AuthManSvr.exe) might exit unexpectedly during logon.
  • The wfica32.exe process might experience an access violation and exit unexpectedly.
  • When you unplug an audio device, the wfica32.exe process might experience an access violation and exit unexpectedly. The issue occurs after upgrading Citrix Workspace app for Windows to version 2203.1 LTSR CU1.
  • The Citrix Desktop Viewer (CDViewer.exe) might exit unexpectedly when the ICA file size is 4096 bytes.

User Experience

  • Citrix Workspace app might display a blurred image when you press the Shift+F2 key multiple times in a user session with Desktop Viewer disabled.
  • When you start a VDA machine and log on to a user session for the first time, you might have to move the mouse explicitly to see the cursor.
  • When you start a seamless application in Windows 10 kiosk mode, the mouse cursor does not respond correctly and fonts might appear distorted.

User Interface

  • Citrix Workspace app might not be responsive after the launch.
  • Attempts to access Citrix Workspace app for Windows might fail when the VPN disconnects or reconnects
  • When you add two stores from the same StoreFront server via GPO, configuring the second store might fail intermittently.
  • When you add a disabled store through a GPO and a different store from the same StoreFront server through a GUI, a loading screen might appear and adding an account might fail.

Citrix Workspace app 2203.1 LTSR CU1 for Windows

Compared to: Citrix Workspace app 2203.1 LTSR

Content Redirection

  • When Desktop Viewer is set to full-screen mode and the default browser is maximized on the endpoint device, the Bidirectional Content Redirection feature might not bring the local default web browser window to the foreground. The issue occurs with local default web browsers other than Internet Explorer.

HDX RealTime

  • During a peer-to-peer call with Microsoft Teams HDX optimization, app window sharing might fail to stop after a high number of start/stop sharing repetitions, and you might not be able to share the desktop screen or app window, call or receive an incoming call until you restart Citrix Workspace app.

Installing, Uninstalling, Upgrading

  • Citrix Workspace The updater service might fail to start resulting in installation failure. The issue occurs when the client isn’t connected to the internet.

Keyboard

  • After launching an HDX session, when you change the foreground window to a local application window, system keys such as Windows and Alt-Tab might be handled by the Citrix session instead of the local PC desktop, though the Citrix session is running in the background.

Logon/Authentication

  • After you successfully log on using Citrix Workspace app, an incorrect sign-in prompt with this message might appear:
    You must sign in to access Citrix Workspace.

Seamless Windows

  • When you plug in or unplug a monitor, the seamless window might be positioned incorrectly.

Session/Connection

  • RDP sessions might fail to launch on Citrix Workspace app 1912 LTSR CU6 for Windows when smart card redirection through RDP is enabled.
  • When you access a VDA for the first-time using Citrix Workspace app for Windows version 2112 or later, the following security message might appear:
    An Online Application is attempting to access information on a device attached to your computer HDX File Access.
    In previous versions, this message was present only during the first access to each published resource in a Delivery Group and not every VDA.
  • Attempts to launch applications or desktops from a tablet using Citrix Workspace app might fail. The issue occurs when the client IP address can’t be retrieved.
  • Configuring stores with geo DNS URL via Group Policy Object or command line might fail if you have set AllowAddStore=N during the Citrix Workspace app installation.
  • When using Citrix Workspace app 2204.1 or later, the session might disconnect. This issue occurs if there’s a restriction to run unsigned binaries, for example, wfica.ocx.

System Exceptions

  • Dragging and dropping a window in an HDX session might be slow and might cause the wfica32.exe process to exit unexpectedly.
  • The Applocker rule in Group Policy Object blocks the integration of the Citrix Gateway plug-in with Citrix Workspace. As a result, several temporary files of the format VPNXXXX.tmp are created in the temp folder. The files are created even when the registry key, HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Secure Access Client has DisableIconHide value.
  • This fix addresses a rare memory leak issue in the wfica32.exe process that occurs with Citrix Workspace app for Windows.
  • Microsoft Office applications might exit unexpectedly when the Software protection service fails to start because of faulty App Protection components.

User Experience

  • Dragging and dropping files from the user device to a published application might work the first time it’s attempted. Subsequent attempts fail and the application does not respond.
  • If you drag and drop a window in an HDX session, it takes time for the window to recover and the taskbar icon to appear.
  • The drag and drop feature might not work when you close a dialog box using the Esc key in a seamless session.
  • When you update the Citrix Workspace app from version 2006 or earlier, the gateway and beacon configurations of the existing stores might get deleted and the same configurations are added again even when the store configurations aren’t changed in the Group Policy Object.
  • Accessing a web store URL from Citrix Workspace app for Windows can cause the workspace window to appear in the foreground instead of the background after each refresh interval.
  • Citrix Workspace app might continue to send data to https://rttf.citrix.com even after Customer Experience Improvement Program (CEIP) is disabled.

User Interface

  • On Citrix Workspace app for Windows, when you add store URLs using Group Policy Object, the following error message might appear:
    Cannot connect to server.
    This issue occurs if one of the stores is disabled and isn’t reachable.
  • With this fix, a sign-in page appears when you log off from Citrix Workspace app for Windows. To enable the fix, set the following registry key:
    • On 32-bit systems:
      HKEY/LOCAL/MACHINE/Software/Citrix/Dazzle
      Name: ShowSignInPageOnLogOff
      Type: REG_SZ
      Value: True
    • On 64-bit systems:
      HKEY/LOCAL/Software/Wow6432Node/Citrix/Dazzle
      Name: ShowSignInPageOnLogOff
      Type: REG_SZ
      Value: True
  • Battery status notification and automatic keyboard pop-up dialog might not appear during the session when the Automatic keyboard display policy is enabled on the DDC.
  • When you start Citrix Workspace app for the first time after adding the store URL, the following error message appears:
    Your Citrix Workspace app encountered an error while initializing Microsoft Edge WebView2. Restart your app.
    This issue occurs when you add the store URL through a GPO or command line and includes ‘/’ after discovery, for example, https://sales.example.com/Citrix/Store/discovery/;On;Store.
  • The Desktop Viewer toolbar might not be visible when you open the virtual desktop from the custom portal stores.

Citrix Workspace app 2203.1 LTSR for Windows

Session/Connection

  • Citrix ADC appliance might stop responding when certain conditions are triggered from Citrix Workspace app for Windows.
  • When you try to redirect to the preferred webcam as set in the Citrix Workspace app for Windows, the setting might not be executed as configured.
    With this fix, the preferred webcam is the only available webcam in the user session. This provides better control when multiple webcams are available in the user session.
  • With this fix, you can set TWITaskbarGroupingMode to GroupNone either in HKEY_CURRENT_USER or HKEY_LOCAL_MACHINE. The TWITaskbarGroupingMode key is available under, for example, HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Seamless Windows.
  • Attempts to add Citrix Gateway URL might fail intermittently with the following error message:
    Authentication Service cannot be contacted.