Following in the footsteps of Apple with iOS 9, Google has unveiled its latest update to the Android Operating System, code-named Marshmallow. The OTA (over the air) updates to their Nexus devices have already begun and will continue in stages, with some carriers set to receive the update sooner than others. Other devices such as Motorola, HTC and Samsung will receive the updates in the coming months, but to date, there is no confirmation of exact timing.

Just like with iOS, we’re happy to announce that XenMobile 10.2 provides instant compatibility for devices upgrading to Android 6.0.

Administrators will need to ensure that they wrap the latest 10.2 Worx Apps with the latest MDX toolkit and that users have updated to the latest Worx Home prior to users upgrading their devices.

What’s New in Worx Mobile Apps 10.2 for Android

Android M (6.0) compatibility. Worx Mobile Apps are now compatible with Android M. A XenMobile server patch, (which you can download here for XenMobile 9.0 or here for XenMobile 10.1) is required. This patch solves the issue of multiple Android M devices showing up as a single device on the XenMobile console.

Worx Home

  • Certificate pinning security enhancements. You can now upload trusted server certificates for XenMobile and NetScaler to Citrix Auto Discovery Service (ADS). All Worx Home communications will enforce these certificates. Also, servers can now change compromised key pairs without users having to re-enroll. This feature provides end-to-end support against man-in-the-middle attacks. For more information about certificate pinning, see Administering Worx Home.
  • Support for Android for Work. Android for Work combines with XenMobile to provide enhanced hardware and software security and comprehensive enterprise mobility management, so IT organizations can increase levels of control without compromising end-user experience.

Worx Home 10.2 requires you to allow Android devices to access the Citrix Auto Discovery Service (ADS). For details, see Port Requirements in the XenMobile documentation. Note that this communication is on outbound port 443. It’s highly likely that your existing environment is designed to allow this. Customers who cannot guarantee this communication are strongly discouraged from upgrading to Worx Home 10.2  If you have any questions, please contact Citrix Support.


•Default mail sync interval. You can now control the default sync period—the length of time WorxMail stays in sync with the mail server

•Left-swipe actions.  In Conversation view, swiping left on any message in the conversation brings up a list of actions users can perform on it.  This aligns Android with iOS functionality.

•Details for non-WorxMail contacts. When users receive a message from someone who isn’t a WorxMail contact, they can tap the sender’s name to see complete contact details, as well as the option to add the person to Contacts.

•Forwarding attachments. When forwarding messages, users can choose whether to include attachments.

•Disabling SSLv3: You can now disable SSLv3 as the default by choosing TLS in the new Connection security level policy in the XenMobile console. This policy determines the minimum version of TLS/SSL used for connections.


•Disable cookies and HTML5 local storage.

•Allow device location in apps.  Users can allow web apps they run within WorxWeb to access their location.

For full details on what’s new in our 10.2 Android update, please refer to the documentation located here.