Overview

The Citrix Global App Configuration Service allows Citrix administrators to centrally manage end users' Citrix client experience. Over 360 settings help streamline experiences like updates and plugins, Citrix App Protection, Citrix Enterprise Browser, HDX experiences, and more on a per-operating-system level.  The Citrix Global Apps and Configuration service is available for cloud,  hybrid, or on-premises Citrix deployments. This POC guide provides high-level instructions for using the Global App Configuration service and provides details on how to use the service to manage:

• Citrix Workspace app versions
• Citrix Secure Access agent
• Citrix Endpoint Analysis plug-in
• 3rd party plug-ins (Zoom VDI plug-in manager)
• Citrix Workspace app settings without a Citrix or Group Policy
• Citrix Enterprise Browser

Prerequisites

• Citrix Workspace App versions must be at or above the following versions:
  • Windows (Current Release - 2106, LTSR -2203.1)
  • Mac (2203.1)
  • iOS (2104)
  • HTML5 (2111)
  • ChromeOS (2203)
  • Android (2104)
• A valid Citrix Cloud account. If you need to create a Citrix Cloud account, visit here.
• The addresses <https://discovery.cem.cloud.us>, <https://gacs-discovery.cloud.com>, and <https://gacs-config.cloud.com> must be contactable.
• This guide features the configuration and installation of the Zoom VDI plug-in; therefore, the prerequisites found here must also be completed.
• For on-premises StoreFront deployments, the StoreFront URL must be claimed before you can configure settings. Follow the instructions here to claim the URL.

Manage Citrix Workspace app

1. Sign in to Citrix Cloud.

2. Once signed in, click the top left hamburger menu and click Workspace Configuration.

3. Click App Configuration.

4. Select your store and click Configure.

5. Change the Workspace URL channel from Production to Test Channel.

6. Select Mac and Windows, and click Updates and Plug-ins.

7. Expand Citrix Workspace App Version, select Windows, and click Edit.

8. Uncheck. Use default settings, select Update type Long Term Service Release (LTSR), and select Fast for Delay group. Click Save Draft.

9. Click Yes on the Save Settings pop-up screen.

10. Select Mac, then click Edit.

11. Uncheck. Use default settings, select Update type Current Release, and select Fast for Delay group. Click Save Draft.

12. Click Yes on the Save Settings pop-up screen.

13. Click Publish Drafts.

14. Click Save on the Save settings pop-up screen.

15. The Citrix Workspace app version is now configured via the Global App Configuration service.

Manage Plug-ins

In our deployment, the Citrix Secure Access agent allows end users to access private apps without a traditional VPN. We will configure the Citrix Global App Configuration service to install and automatically update the agent to the latest version.

1. Expand Secure Access Plug-in in Updates and Plug-ins.

2. Select Windows and click Edit.

3. Uncheck. Use default settings, select Install and update, and check Install the plug-in silently after the end user adds the store. Click Save Draft.

4. Expand Zoom VDI Plug-In Management.

5. Select Windows and click Edit.

6. Uncheck. Use default settings, select Install and update, and check Install the plug-in before the end user logs in. Click Save Draft.

7. Click Yes on the Save Settings pop-up.

8. Select Mac and Click Edit.

9. Uncheck. Use default settings, select Install and update, and check Install the plug-in before the end user logs in. Click Save Draft.

10. Click Yes on the Save Settings pop-up.

11. Click Publish Drafts.

12. Click Save on the Save settings pop-up.

The Citrix Secure Access agent and Zoom VDI Plug-in Manager are now configured to install and update with the Citrix Global App Configuration service.

Manage Citrix Workspace app Settings

With over 360 configuration settings available within the Global App Configuration service, Citrix administrators can reduce the overhead of managing experiences separately for different users and devices across the enterprise. For our deployment, we will enable several App Experience, Security, and Session Experience settings using the Global App Configuration service, which must typically be configured by Citrix or Group Policy.

1. Select Mac and Windows from the App Configuration > URL Configuration page.

2. Expand Security and Authentication and select App Protection.

3. Expand Anti Key Logging, select Mac and Windows, and set it to Enable.

4. Expand Anti Screen Capture, select Mac and Windows, and set to Enable.

5. Select Authentication.

6. Expand Secure Access Auto Login, select Mac and Windows, and switch to Enabled. (This setting allows the Citrix Workspace app user to single-sign onto the Citrix Secure Access client using the store configured on the Citrix Workspace app.) 

7. Expand Session Experience and select Clipboard. Expand the Clipboard Redirection setting, choose Windows, and switch to Enabled.

8. Click Publish Drafts.

9. Click Save on the Save settings pop-up screen.

10. Your settings are now saved.

11. Click View configured changes to review the changes made.

12. Select the Platform drop-down and choose Windows. Click Apply.

13. Scroll to Citrix Workspace app version and click View changes in full.

14. Review the changes and click Close.

15. Review the other changes made by selecting View changes in full for each.

Review your current Citrix and Group policies to see which Citrix Workspace app configuration settings can be moved into the Citrix Global App Configuration service.

Manage Citrix Enterprise Browser

The Citrix Global App Configuration service can configure Citrix Enterprise Browser settings, allowing Citrix administrators to set various settings or system policies for the Citrix Enterprise Browser. For our deployment, we will set the Citrix Enterprise Browser as the default browser for all web and SaaS apps, remove the ability to save browser history and change how we handle default cookies.

1. On the App configuration > URL Configuration page, select Mac and Windows, then Enterprise Browser.

2. Scroll to and expand Open All SaaS Apps Through Citrix Enterprise Browser, select Mac and Windows, and switch each to Enabled.

3. Expand Saving Browser History Disabled, select Mac and Windows, and switch each to Enabled.

4. Scroll to and expand Default Cookies, select Mac and Windows, and choose Keep cookies for the session duration from the dropdown.

5. Click Publish Drafts.

6. Click Save on the Save settings pop-up.

Your Citrix Enterprise Browser settings are now configured.

Summary

This guide provides high-level instructions for Citrix administrators to test the Citrix Global App Configuration service in a proof-of-concept environment. You learned how to configure the service, deploy and update the Citrix Workspace app, Secure Access agent, and Zoom VDI plug-in Manager, and configure several of the over 360 Citrix Workspace app settings available to be managed through the service. To learn more about the Citrix Global App Configuration service, visit the following:

Citrix Global App Configuration service Product Documentation

Citrix Global App Configuration service Tech Brief

Citrix Global App Configuration service Settings and Behaviors FAQ