Deprecation
The announcements in this article are advanced notice of the Citrix Endpoint Management features that are being phased out, so that you can make timely business decisions. Citrix monitors customer use and feedback to determine when they are withdrawn. Announcements can change in subsequent releases and might not include every deprecated feature or functionality. For details about product lifecycle support, see the Product Lifecycle Support Policy article.
Important:
Thank you for using the Citrix Endpoint Management Analyzer Tool, we appreciate it. Owing to our frequent and stable release cadence, this tool is no longer required. Citrix has decided to stop this service from March 31, 2023. We recommend that you use the connectivity checks available within the Citrix Endpoint Management console or Citrix NetScaler Gateway. For more information, see Connectivity checks.
Deprecations and removals
The following list shows the Citrix Endpoint Management features that are deprecated or removed.
Deprecated items aren’t removed immediately. Citrix continues to support a deprecated item until removing it in a future release.
Removed items are either removed, or are no longer supported, in Citrix Endpoint Management.
For information about the mobile productivity apps that reached End of Life, see EOL and deprecated apps.
| Item | Description | Deprecation announced | Removed | Alternative |
|---|---|---|---|---|
| Citrix Endpoint Management Government offering | Deprecated support for Citrix Endpoint Management Government offering. | January 2022 | July 2022 | Citrix Endpoint Management Standard edition |
| SafetyNet Attestation API | Deprecated support for Android SafetyNet Attestation per the announcement from Google here. | July 2023 | November 2023 | Play Integrity API |
| Chrome OS | Deprecated support for Chrome OS. | July 2022 | May 2023 | No alternative |
| tvOS | Deprecated support for tvOS. | July 2022 | May 2023 | No alternative |
| Windows Information Protection (WIP) | Deprecated support for Windows Information Protection per the announcement from Microsoft here. | August 2022 | October 2022 | No alternative |
| Citrix Endpoint Management Analyzer | Deprecated support for the Citrix Endpoint Management Analyzer tool. | July 2022 | Target: March 31, 2023 | No alternative |
| Workspace hub device management | Deprecated support for Citrix Ready workspace hub devices. | January 2022 | June 2022 | No alternative |
| Microsoft Store for Business | Deprecated support for Microsoft Store for Business. Microsoft no longer supports this platform. For more information, see the Microsoft documentation. | July 2021 | Target: March 2023 | No alternative |
| Samsung SAFE | Deprecated support for Samsung SAFE. | January 2022 | June 2022 | Use Android Enterprise. |
| Custom XML for Zebra | Deprecated support for custom XML on Zebra devices. | January 2022 | June 2022 | Use Android Enterprise managed configuration. |
| PKI identities: Generic, Symantec PKI, DigiCert, and Entrust | Deprecated support for Generic, DigiCert Managed, and Entrust adapter PKI entities. | June 2021 | January 2022 | No alternative |
| Android for Workspace | Deprecated support for Android for Workspace | January 2022 | April 2022 | No alternative |
| Carrier SMS Gateway | Deprecated support for Nexmo SMS gateway notifications | January 2022 | April 2022 | Use SMTP server notifications |
| Mobile Service Provider (MSP) | Deprecated support for MSP interface to query Blackberry and other Exchange ActiveSync devices and issue operations | January 2022 | April 2022 | No alternative |
| MDX Toolkit | Deprecate support for the MDX Toolkit in favor of the Mobile App Management (MAM) SDK. During the transition period, you can use both MDX wrapped apps and MAM SDK developed apps. | March 2020 | July 2023 | To continue managing your enterprise applications, use the MAM SDK. |
| RBAC Role - Shared devices enroller and COSU devices enroller | Deprecate support for predefined Role Based Access Control settings for both Shared devices enroller and COSU devices enroller | July 2021 | December 2021 | Configure iOS devices through Apple School Manager or Apple Business Manager. Configure Android COSU (dedicated) devices through enrollment profiles. |
| Allow auto-connect to Wi-Fi sense hotspots restriction for Windows devices. | Remove support for the Allow auto-connect to Wi-Fi sense hotspots restriction for Windows 10 devices. Windows 10 no longer supports this feature. For information, see the Microsoft documentation. | October 2021 | February 2022 | No alternative |
| MDX: Alternative Gateway Server | Deprecate step-up authentication for iOS and Android devices. | March 2020 | September 2021 | No alternative |
| MDX: Micro VPN (full tunnel mode) | Deprecated a full virtual private network (VPN) tunnel for iOS and Android devices. | March 2020 | September 2021 | Use the MAM SDK Web SSO mode or create a per-app VPN policy with the Citrix SSO connection type. |
| MDX: PAC file support | Deprecated support for a Proxy Automatic Configuration (PAC) file with a full VPN tunnel deployment for iOS and Android devices. | March 2020 | September 2021 | Use NetScaler Gateway to connect through a proxy server for access to internal networks. |
| MDX shared device support | Deprecated shared device support for MDX apps. | March 2020 | September 2021 | For Android Enterprise, use shared devices enrolled as dedicated devices. For iOS, use Apple School Manager or GroundControl. |
| Android - Sony | Deprecated support for Android Sony devices and Sony-specific policies. | January 2021 | February 2022 | Use Android Enterprise |
| Android - HTC | Deprecated support for Android HTC devices and HTC-specific policies. | January 2021 | February 2022 | Use Android Enterprise |
| Android - Amazon | Deprecated support for Android Amazon devices and Amazon-specific policies. | January 2021 | February 2022 | Use Android Enterprise |
| Knox Mobile Enrollment (legacy DA) | Deprecated support for Knox Mobile Enrollment (KME) in the legacy Device Administrator mode on all Android versions. | May 4, 2021 | September 2021 | Use KME to enroll in Android Enterprise mode. Android 8, 9, 10, 11 support Android Enterprise. |
| High Security enrollment mode | Deprecated support for generating enrollment invitations with the High Security enrollment security mode. | July 2021 | February 2022 | See Enrollment invitations for a list of supported enrollment security modes. |
| Derived credentials | Deprecated support for derived credentials and the Citrix Derived Credential Manager app. | March 2021 | December 2021 | See iOS for a list of authentication types supported for iOS. |
| APNs outgoing ports | Apple support for the APNs legacy binary protocol ends from March 31, 2021. Apple recommends that you use the HTTP/2-based APNs provider API instead. As part of this change, we’re deprecating support for ports 2195 and 2196, used to send APNs notifications to *.push.apple.com. |
October 2020 | March 2021 | Use port 443 instead. See Network and firewall requirements. |
| MDX Service | Deprecated support for the MDX Service in favor of the Mobile App Management (MAM) SDK. During the transition period, you can use both MDX wrapped apps using the MDX Toolkit and MAM SDK developed apps. | March 2020 | September 2021 | To continue wrapping your enterprise applications, use the MDX Toolkit. |
| Enrollment invitation setup in the Self-Help Portal | Deprecated support for users to generate enrollment invitations from the Self-Help Portal. | July 2021 | July 2021 | Contact your administrator to generate enrollment invitations in the Citrix Endpoint Management console. |
| Enrollment invitation setup | Deprecated support for using a device IMEI, serial number, and UDID to create an enrollment invitation. | April 2021 | July 2021 | When you create an enrollment invitation, configure the available settings under Manage > Enrollment Invitations in the Citrix Endpoint Management console. |
| Certificate-based authentication signature algorithms (non-FIPS and weak ciphers) | Deprecated support for the following signature algorithms: SHA1withRSA, SHA224withRSA, SHA1withECDSA, SHA224withECDSA, SHA1withDSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA. | May 2020 | June 2021 | When you create a CSR for a credential provider in the Citrix Endpoint Management console (Settings > Credential Providers > Certificate Signing Request), choose a stronger cipher. |
| Citrix mobility apps and Workspace apps for Android 7.x and iOS 12.x | Deprecated support for the Android 7.x and iOS 12.x versions of Citrix Secure Hub, Citrix Secure Mail, Citrix Secure Web, and Citrix Workspace app. | April 2021 | June 2021 | Use, at a minimum, the current and prior version of each major operating system platform. Older devices remain enrolled. However, Citrix doesn’t test or support the legacy devices. |
| RSA soft token support for Android | Deprecated support for the direct import of RSA soft tokens into Citrix Secure Hub for Android. | January 2021 | February 2021 | You can import the RSA soft token inside the RSA secure ID app available in Google Play. You can then use the token for NetScaler Gateway authentication. |
| Internet Explorer 11 | Deprecated support of Internet Explorer use with the Citrix Endpoint Management console. | January 2021 | January 2021 | Use the latest version of these web browsers: Google Chrome, Mozilla Firefox, Microsoft Edge, Apple Safari |
| Gateway configuration checks in Citrix Endpoint Management Analyzer | Deprecated support for the Gateway configuration check option. | November 2020 | November 2020 | Use the Citrix Insight Services check in Analyzer to check your Citrix ADC configurations for Citrix Endpoint Management deployment readiness. |
| Apps published for the legacy Device Administrator mode on Android Enterprise devices | We no longer deliver apps published for the legacy DA platform to devices enrolled in Android Enterprise. | October 2020 | November 2020 | For Android Enterprise devices, publish apps for the Android Enterprise platform. To continue to publish legacy DA apps to devices in DA mode, create a separate delivery group for those apps. |
| Legacy Device Administrator mode for Android 10 devices | Google deprecated some Device Administrator APIs. Citrix doesn’t support Android 10 devices enrolled into Device Administrator mode as of the upgrade to Citrix Secure Hub that targets Android API level 29. | February 2020 | November 2020 | Migrate Android 10 devices to Android Enterprise. |
| Android TouchDown | DigiCert stopped supporting Android TouchDown. Citrix removed the Android TouchDown platform page from the Exchange device policy. | July 2018 | November 2020 | Recommendation: Use Citrix Secure Mail. |
| New Device Administrator enrollments for Android 10 | Deprecated support for new enrollments or re-enrollments into the legacy Device Administrator mode on Android 10 devices. Already enrolled devices continue to work. | February 2020 | September 2020 | Enroll new Android 10+ devices into Android Enterprise. |
| MDX encryption | Deprecated MDX encryption and the MDX encryption feature in the Citrix Endpoint Management console. | October 2019 | September 2020 | Enable iOS or Android platform encryption using our Encryption Management feature with added compliance checking. Ensure you have tested and planned for migration off MDX encryption by July 2020. |
| Windows Mobile/CE | Deprecated support for Windows Mobile/CE devices. | April 2018 | September 2020 | Use Windows 10 Desktop and Laptop. |
| Samsung SEAMS container | Deprecated support for the Samsung SEAMS container. | June 2020 | August 2020 | Use Android Enterprise. |
| Remote Support | Deprecated the Remote Support client. | January 2019 | August 2020 | No alternative |
| Citrix mobility apps and Workspace apps for Android 6.x and iOS 11.x | Deprecated support for the Android 6.x and iOS 11.x versions of Citrix Secure Hub, Citrix Secure Mail, Citrix Secure Web, and Citrix Workspace app. | April 2020 | June 2020 | Use, at a minimum, the current and prior version of each major operating system platform. Older devices remain enrolled. However, Citrix doesn’t test or support the legacy devices. |
| Citrix Secure Hub Network Extensions for iOS | Deprecated the Network Extension framework that allowed you to customize networking features for iOS devices. Citrix Secure Hub release 20.3.0. | October 2018 | March 2020 | No alternative |
| API sign in using local accounts | Administrators can no longer sign in to the REST API using a local account. | October 2020 | Administrators can log in using a Citrix Cloud account. See REST API. | |
| Self-signed Secure Sockets Layer (SSL) certificates | Deprecated support for self-signed SSL certificates for all device platforms. | May 2020 | Replace your existing self-signed certificate with a trusted SSL certificate from a well-known certificate authority (CA). |
Deprecation
Copied!
Failed!