1.  Overview

Citrix Enterprise Mobility Management allows you to securely manage and deliver mobile apps to users. With the Citrix MDX Toolkit, you can prepare iOS and Android apps to secure access and enforce policies. After you prep the app, you can upload the app to App Controller. Users can then download and install the app on their mobile devices from Citrix Worx Home. They can subsequently open and work with the app from an icon on the Worx Home home screen, or on the mobile device spring board.

2. App Preparation Process

The Citrix MDX Toolkit is available on My Citrix. The MDX Toolkit runs on a computer running Mac OS X Version 10.7 (Lion) or Version 10.8 (Mountain Lion). The tool is not available for a Windows-based computer.

The MDX Toolkit for iOS and Android Apps is available for download in the Worx Mobile Apps section found at the following location:   http://www.citrix.com/downloads/xenmobile/product-software/xenmobile-86-enterprise-edition.html

P R E – R E Q U I S I T E S

For iOS apps, you need the following basic pre-requisites:

  •  An iOS mobile app IPA file
  •  The iOS Distribution Provisioning Profile and Distribution Certificate to sign the app for distribution

For Android apps, you need the following basic pre-requisites:

  •  An Android mobile app APK file
  •  Java Development Kit (JDK) 1.7 on your computer
  •  Android Software Development Kit (SDK) on your computer
  •  A keystore for signing Android mobile apps

Note: To wrap apps for Android Version 4.3, you need to install the JDK 1.7

For More information please refer to below link:

http://support.citrix.com/proddocs/topic/xenmobile-understand/xmob-appwrap-deploy-mdx-toolkit-con.html

 M D X T O O L K I T  IN S T A L L  P R O C E D U R E

After you download the MDX Tookit from My Citrix, you install the tool on your computer. When you run the tool, the tool prompts you to follow basic steps. For both types of app, use the following guidelines:

  •  Provide the app name and description about the app
  •  Provide the supported minimum and maximum operating sysem versions the app
  •  Provide a list of devices to exclude (the devices in the list cannot run the app).
  • Save the new Citrix MDX (.mdx) file that the tool creates to your computer. The MDX file is the prepped app that contains the Citrix MDX logic and policies

After you complete prepping the app, you then upload the MDX file to AppController. You use the AppController management console to configure application specific details and policy settings that Worx Home enforces. When users log on by using Worx Home, the app appears in the store. Users can then subscribe, download and install the app on their mobile device. For more information about configuring the app details and policy settings in App Controller see Adding Mobile Apps to App Controller.

NOTE: The Citrix MDX Toolkit installation package also includes a utility for removing the MDX Toolkit. You can find the utility at the following location on your computer: /Applications/Citrix/MDXToolkit/Uninstaller. Double-click the utility to start the uninstaller app and then follow the prompts. When you remove the tool, you receive a message prompting you for your user name and password. Please enter your username and password to complete the uninstall process.

3. iOS Certificate and Provisioning Profile

Before you can start prepping your iOS apps, you must first obtain a distribution certificate and profile. This process described here is based on the iOS Developer Program.

Login to your account at the following Link: https://developer.apple.com/account

If this is the first time you are logging On to the portal, you will have to request for a certificate. Click Certificates in the left pane

Click Production in the left pane and then click + in the top right corner of the page.

Select the App Store and Ad Hoc radio button and click Continue at the bottom of the page

Note: Download and install the WWDR intermediate certificate on the Mac where you will use the Citrix MDX Toolkit tool

Note: App Wrapping might fail if intermediate certificate is not installed on you Mac machine.

Click Continue

Next, open Key chain Access on your Mac computer. Choose Keychain Access > Certificate Assistant > Request a Certificate from a Certificate Authority

Enter your email address in the UserEmail Address field

Enter your name in the CommonName field. Select the Saved to disk option

Click Continue

Save the Certificate Signing Request to a convenient folder on your computer.

Navigate back to the developer portal and click Choose File

Select the Certificate Signing Request file and click Choose, Click Generate

The certificate will appear in the portal. Download the certificate and install it on your Mac.

Click Identifiers and then App IDs in the left pane, Click + in the top right corner of the page

Provide an App ID Description

If you’re going to prep apps that you have not developed, such as the Citrix@Work apps, select the Wildcard App ID radio button and enter a “*” in the Bundle Identifier field. If you’re going to prep apps that you own, select the Explicit App ID radio button and enter a unique App ID for each of your apps in the following format com.domainname.appname

Click Continue

Verify the information you entered and click Submit. Click Done on the next page

Click Devices in the left pane and then click + in the top right corner of the page

Note: If you are using an iOS Developer Enterprise Program, you will not have register devices with the provisioning portal

Enter a device Name, the associated UUID of the device, and click Continue.

Click Provisioning in the left pane, click Distribution, and then click + in the top right corner of the page

Click the Ad Hoc radio button and click Continue

Note: If you are using an iOS Developer Enterprise Program, you will have to create an In House distribution profile instead of the Ad Hoc

Select the App ID you created

Select the certificate that you created

Select the devices you want to associate with the provisioning profile and click Continue

Name the provisioning profile and then click Generate

Click Download and save the provisioning profile on your Mac

4. How to use existing keys, certificates and profiles for Wrapping.

If you have already created keys, certificates and profile by following the above steps, you can use the same certificates and profile on another MAC machine to wrap the application.

Note: You can skip this section if you are generating certificate and profiles for the first time. 

——————————————————————————————————————————————————————————-

Open Key chain Access on the Mac   device where you have originally generated the certificate and login.

Select Keys from left pane and expand the certificate which you want to Export. After selecting the certificate and its key, right click and Select Export 2 Items

Select the location where you want to save this certificate and select the file format as p.12

Enter a password which will be used to protect the exported certificate.

Now login to the Mac Machine where you want to import this certificate and login to Keychain access. Click on Import Items

Navigate to the location where you have saved the p.12 format certificate and click Open.

Provide the password which you have entered in Step 3 of this section.

You can login to Apple developer account and download the Provisioning profiles associated to this certificate.

5. iOS App Preparation Guide

The following demonstrates how to use the Citrix Mobile Preparation tool to convert a .ipa file to a .mdx file. You must obtain the iOS Distribution Provisioning Profile from Apple that allows Apple to sign the app. For more information about obtaining provisioning profiles, see the Apple Web site ( http://www.apple.com/)

——————————————————————————————————————————————————————-

Launch the Citrix MDX Toolkit  from Mac Applications folder

Select the For IT administrators radio-button and click Next.

Click Browse and select an .ipa file

Click Next after selecting an .ipa file (Example: WorxMail.ipa)

Enter/edit the application name and description and click Next

The app name and description are automatically determined from the application installer package. However, you can change the app name on the Verify App Details screen

Optionally, provide a minimum and maximum OS version for which the app was designed and a comma-separated list of devices you would like to exclue

Click Next

Click Browse and select the iOS Distribution Provisioning Profile. The associated Distribution Certificate will auto-populate in the iOS Distribution Certificate drop-down

Click Create

Note: If the associated distribution certificate does not have a key installed into Keychain Access, then iOS Distribution Certificate will not auto-populated. It is mandatory to have both key and certificate installed into Mac machine Keychian Access

A pop-up appears asking you to provide a name for the resultant MDX file and a location to which you would like to save the file

Click Create

A confirmation screen stating that the file has been created successfully appears

Click Finish

6. Android App Preparation Guide

The following demonstrates how to use the Citrix Mobile Preparation tool to convert a .apk file to a .mdx file

To prepare Android mobile apps, you must install the following on your computer before running the MDX Toolkit:

  •  Java Development Kit (JDK) Version 1.7
  •  Android Software Development Kit (SDK)
    • Digitally signed certificate whose private key is held by the application’s developer. For more information about the certificate, see Signing Your Applications on the Android Developers web site

Note: Note: To wrap apps for Android Version 4.3, you need to install the JDK 1.7.

You need to add the Android SDK path in the PATH environment variable on your computer. You can also provide the PATH variable in the MDX Toolkit during the preparation process. You also need to add the APK Tool installation path in the PATH environment variable.

—————————————————————————————————————————————————————————————————————————————————————

Launch the Citrix MDX Toolkit

Select the For IT administrators radio-button and click Next.

Click Browse and select an .apk file

The first time you use the MDX Toolkit to prepare a .apk file, you are prompted to provide the path to the Android SDK. Click Browse and provide the path to the Android SDK folder

Click Next (In this example, we are using GoToMeeting.apk)

Enter/edit the application name and description and click Next

The app name and description are automatically determined from the application installer package. However, you can change the app name on the Verify App Details screen

Optionally, provide a minimum and maximum OS version for which the app was designed and a comma-separated list of devices you would like to exclue

Click Next

Click Browse and select the Keystore containing the certificate you would like to use to sign the application

For testing, you can simply use the debug keystore instead

Click Create

Note: Your keystore must have a key that meets the following guidelines:

  •  1024 bit keysize
  •  DSA key algorithm (keyalg)
  • SHA1with DSA signing algorithm (sigalg)

A pop-up appears asking you to provide a location to which you would like to save the resultant MDX file.

Select a folder and click Create

A confirmation screen stating that the file has been created successfully appears

Click Finish

7. Conclusion

The Citrix MDX Toolkit is used to create Citrix specific code modules from the 3rd party packages (.ipa or .apk). All regular unencrypted packages (i.e. IPA files which are not from Apple app store) can be used as an input to the MDX Toolkit.

8. Revision History

Revision Change Description Updated By Date

3.0

Updated to Release 2.6 James Gonsalvez 02/27/2013
Updated to release XM 8.6 Hemanth Rao Kotha 11/25/2013