Release Notes for XenMobile Server 10.15 Rolling Patch 12 Release

Last published : Oct 12, 2026
These release notes describe enhancements and fixed and known issues for XenMobile Server 10.15 Rolling Patch 12. You can download the XenMobile Server 10.15 Rolling Patch 12 software binaries at Sign-in to Download.
Related information
Release notes for Rolling Patches

What's new

  • Support new strong certificate mappings for Certificate-based authentication
    A new mapping method is introduced to allow greater flexibility in issuing certificates that meet strong mapping requirements. XenMobile Server now appends URL=tag:microsoft.com,2022-09-14:sid:<user's SID> to Subject Alternative Name (SAN) of certificates.
    • To enable this feature for existing users, customer admins must add the Client Property MICROSOFT_CERTIFICATE_STRONG_MAPPING. For details, see Client Properties.
    • Strong certificate mapping is supported only on Windows Server 2019 and later. For more information, see Microsoft Strong Mapping.
  • Support for iOS 26
    XenMobile Server and Citrix Mobile productivity apps are now compatible with iOS 26.
  • Support for Android 16
    XenMobile Server and Citrix Mobile productivity apps now support Android Enterprise devices running Android 16. For details on security and privacy, see the Android developer documentation.
  • Manage Config policy text box
    When the customer uses Knox Service Plugin along with the Managed Configuration policy, the maximum character length for all the text boxes on Separated Apps Policies increases to 8,192 characters.
  • Secure Hub APNs certificate renewal
    The Secure Hub Apple Push Notification service (APNs) certificate for XenMobile Server 10.15 expires on January 4, 2026. This update automatically renews the Secure Hub APNs certificate to a new certificate, valid until November 9, 2026.

Fixed issues

  • The Sign-in button becomes greyed out on the XenMobile portal when the password is entered using right-click and paste from the mouse.
  • iOS users are unable to launch Secure Mail/Secure Web applications and experience "Unable to open" error when redirecting from Secure Mail/Secure Web to Secure Hub.
  • Device Enrollment Program (DEP) devices continue to perform MDM+MAM enrollment even when the Enrollment Profile is configured as MDM-only.
  • When enrolling windows clients with XenMobile MDM solution, delivery group deployment fails. As a result, manual sync operations are required to apply pushed policies. As a workaround, manual deployment to a single device is needed.
  • When an iOS device has an App Lock policy for an uninstalled application, the device locks with the error "Guided Access app is Unavailable. Please contact your administrator" and the touchscreen becomes unresponsive, even after force reboot.
For information about previous rolling patches for XenMobile Server 10.15.0, see Release notes for Rolling Patches.

Install XenMobile Server updates

Important:
  • Before installing this update, ensure that you have upgraded to XenMobile Server version 10.15.0.23. Also take a snapshot of the current settings and create a backup of the database.
  • If you upgrade from 10.15 RP2 or any earlier release, including 10.15 RTM, follow the steps in To upgrade clustered XenMobile deployments to upgrade all cluster nodes.
For systems configured in cluster mode, follow these steps to update each node, one after the other:
  1. Sign in to your account on the Citrix® website and download the XenMobile Server update (.bin) file to an appropriate location.
  2. In the XenMobile Server console of a node, click Settings > Release Management.
    The Release Management page shows the currently installed software version and a list of any updates, patches, and upgrades that you uploaded.
  3. Under Release Management, click Update. The Update dialog box appears.
  4. Click Browse to upload the update (.bin) file that you downloaded from Citrix downloads page.
  5. Click Update and then, if prompted, restart the XenMobile Server node using command line.

To verify the patch deployment

After installing this patch, sign in to the XenMobile Server console as an administrator, then navigate to Settings > Release Management > Updates. This page shows details about the most recently installed patch.