Citrix Workspace app Technology Preview for macOS

Release Date: Aug 30, 2019

Whats new in version 19.9.0.17:

1. Fix for Realtime Media Engine (RTME) not working on macOS Catalina.

2. Fix for Subscribed Desktops and Apps launch issue.

Known Issues:

1. Session launch may fail with error "You have not chosen to trust the <CERTIFICATE> the issuer of the server's security certificate.

Work around: Navigate to CWA for Mac Preferences -> Security and Privacy -> TLS. Switch the Crypto Module to Standard from FIPS.

2. While launching Subscribed Apps macOS will ask for Automation permissions. If the user denies the permission the launch process is hung.

Work Around: Navigate to macOS Preferences -> Security and Privacy -> Privacy -> Automation. Provide the permissions for Citrix Viewer.app, Citrix Workspace.app and all of the subscribed apps.

Note:

Please Uninstall the previous version of CWA for Mac 1909 EAR before installing the latest EAR.

Whats New:

1. Support for macOS Catalina 10.15.

2. Due to security concerns we are updating our Cipher suites for CWA Mac 1909. With this we will deprecate the below cipher suites:

Cipher suites with prefix “TLS_RSA_*”

Cipher suites RC4 and 3DES

TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d)

TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c)

TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003d)

TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)

TLS_RSA_WITH_AES_128_CBC_SHA (0x002f)

TLS_RSA_WITH_RC4_128_SHA (0x0005)

TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a)CWA mac will only support the following cipher suites:

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)

For DTLS 1.0 users CWA Mac 1909 will only support the bellow cipher suite:

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)

We recommend the customers to upgrade their NetScaler version to 12.1 and above if they want to use DTLS 1.0. Otherwise, it will fall back to TLS based on the DDC policy. The following link also applies to CWA for Mac.

https://support.citrix.com/article/CTX250104

Prerequisite:

Starting with macOS Catalina, Apple enforce additional requirements for Root CA Certificates and intermediate Certificates which Administrators has to configure as detailed in https://support.apple.com/en-in/HT210176

Note:

CWA for Mac 1909 will exhibit the following behavior due to enhancements in the macOS Catalina

1. When opening Citrix Workspace app for Mac and Citrix Viewer for the first time on macOS Catalina, the OS prompts users to allow notifications from Citrix Viewer. Click “Allow” to receive notifications related to Citrix Workspace app for Mac.

2. Notifications from CWA for Mac now requires the user to provide one time permission to post notifications.

3. Accessing the Client Drive Mapped drives (CDM) require one time permission to be given to access the local files.

4. This is an Early Access Build shared for the purpose of testing/validation with the intent to make the organizations ready for the upcoming release and is NOT advised to be deployed in production environments.

Please provide your feedback at https://podio.com/webforms/22969502/1632225

Support Resources

Workspace app for Mac

Aug 30, 2019 Checksums
  • SHA-256 - 83602ddb19fdab241a9dc2ae9bc75135b7a65dc555c075404e29ea2130005a32