Citrix Workspace™ app for Mac 2607 - Preview

You can download Citrix Workspace app for Mac 2607 preview version from the Downloads page.

For information on installation, see Install page.

Note:

This is an Early Access Build shared for the purpose of testing or validation with the intent to make organizations ready for the upcoming release and is NOT advised to be deployed in production environments.

You can give the EAR feedback using the Early Access Release Feedback form.

What’s new

The following is a list of features that are available in Citrix Workspace app 2607 for Mac:

• Microsoft Teams VDI Plugin — generally available and installed by default
• Version rollback support for auto update
• Faster and less disruptive automatic updates (side-by-side silent update)
• Session Pre-Launch support
• Improved Point of Presence (PoP) selection
• DNS caching for improved session resilience (Technical Preview)
• Dynamic MTU re-discovery for EDT sessions (Technical Preview)
• Streaming read and write for Client Drive Mapping (CDM) (Technical Preview)
• HDX Direct for Shield V2 (Technical Preview)
• HDX graphics super resolution (Technical Preview)
• Location redirection for virtual sessions (Technical Preview)
• Enhanced call connect times with Unified Communications SDK
• Resilient and secure third-party plugin execution (Technical Preview)
• OAuth redirection support for Bidirectional content redirection
• Adaptive Webcam Bitrate
• Health checker tool for CAM and MDM Policy (Technical Preview)

Microsoft Teams VDI Plugin — generally available and installed by default

Starting with Citrix Workspace app for Mac 2607, the new VDI optimization for Microsoft Teams is generally available and the Microsoft Teams VDI plug-in is installed by default. The plug-in checkbox in the installer Add-ons step is now checked by default, and the plug-in is also installed automatically during Citrix Workspace app for Mac auto-update.

This is a behavior change from the 2603 release, where the plug-in was opt-in and had carried a Technical Preview designation. The New VDI Optimization for Microsoft Teams for Mac is now Generally available. For more information, see Generally available: Microsoft Teams new optimization for VDI on Mac.

Version rollback support for auto update

Starting with version 2607, Citrix Workspace app for Mac supports administrator-initiated version rollback through the automatic update mechanism. When an administrator needs to reverse a problematic update, Citrix Workspace app can move the device back to an earlier, stable version using the same quiet, side-by-side mechanism as a normal automatic update.

The earlier version installs in the background while you continue working. If a session is active, you are prompted to Restart now or choose Later. If you select Later, the rollback is applied automatically when you are idle or after a time period configured by your administrator. Your preferences from the earlier version are restored automatically and your store is added back.

Note:

If a version newer than the configured rollback source is available, Citrix Workspace app updates forward instead of rolling back, ensuring you are never moved to an older version unnecessarily.

Configuring rollback using MDM

Rollback is delivered through an MDM configuration profile using the macOS preference domain com.citrix.receiver.nomas. All values are strings.

The following is an example of an MDM configuration profile using a Custom Settings payload for the domain com.citrix.receiver.nomas:

<key>AdminRollbackFromVersion</key><string>26.07.10.15</string>
<key>AdminRollbackToVersion</key><string>26.07.0.67</string>
<key>AdminRollbackMaxTimeIntervalHours</key><string>4</string>
<!--NeedCopy-->

Note:

Delivery of these settings through Global App Configuration Service (GACS) is planned but not yet available. MDM delivery is the only supported method at this time.

Data handling during rollback

• User preferences: The target version’s preferences snapshot is restored only when that snapshot is available — that is, when the target version was the version used immediately before the current one. Otherwise, preferences are left unchanged.
• Store: The store is kept at its latest state and added back automatically after rollback.
• Service and cache databases: These are refreshed rather than reused from the earlier version.

Faster and less disruptive automatic updates (side-by-side silent update)

Starting with version 2607, Citrix Workspace app for Mac delivers a faster and less disruptive update experience. This experience takes effect when updating from version 2607 to the next higher version. Updates install silently in the background while you continue working, with no interruption to your running apps or active sessions. When the app is idle, the update completes automatically in seconds, with no action required. If you prefer to update on your own schedule, you can apply a ready update at any time from the title bar, the Quick Access menu, or the macOS Notification Center. Citrix Workspace app never closes a running app or active session to apply an update, and once completed, the previous version is removed automatically to free up disk space.

Session Pre-Launch support

Starting with version 2607, Citrix Workspace app for Mac supports Session Pre-Launch for virtual applications, establishing application sessions in the background before the user explicitly launches an app. When the user clicks an app, the pre-established session is reused immediately, significantly reducing the perceived launch time. This brings Session Pre-Launch for virtual applications to parity with Citrix Workspace app for Windows.

Pre-launch sessions are initiated automatically on login, store connect, settings refresh, and system wake. The app icon appears in the Dock only after the user launches an app. Virtual desktops are not currently supported for Session Pre-Launch.

Improved Point of Presence (PoP) selection

Starting with version 2607, Citrix Workspace app for Mac improves Gateway Service PoP selection for eligible Citrix Gateway Service sessions. When configured and session latency exceeds the defined threshold, the Citrix Workspace app for Mac can evaluate candidate PoPs associated with the Gateway Service FQDN and reconnect through a better-performing PoP. This enhancement helps improve session responsiveness when applicable.

DNS caching for improved session resilience (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac caches the Citrix Gateway Service PoP address after each successful session connection. If DNS is temporarily unavailable when a user tries to launch or reconnect to a session — due to a DNS provider outage or an unstable network — the Workspace app automatically falls back to the cached address, allowing the session to proceed without any user intervention.

Without this, a DNS outage translates directly into session launch failures for end users. With DNS caching enabled, session failures during DNS outages are reduced drastically.

Note:

DNS caching improves resilience against DNS service disruptions but does not guarantee successful session establishment in all scenarios. If the previously cached gateway service PoP is unavailable due to planned maintenance, service disruption, or network reachability issues, session launches may still fail.

If a user has changed locations since the address was last cached, the Workspace app may connect through a gateway service PoP that is not geographically optimal, resulting in slightly higher latency. This is a deliberate tradeoff — a connected session with higher latency is preferable to a failed launch.

To disable it using the terminal command, run the following:

defaults write com.citrix.receiver.nomas EnableDNSCACHE -bool false
<!--NeedCopy-->

To disable this feature through MDM, use the following setting:

<key>EnableDNSCACHE</key><false/>
<!--NeedCopy-->

Dynamic MTU re-discovery for EDT sessions (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac supports dynamic Maximum Transmission Unit (MTU) re-discovery for Enlightened Data Transport (EDT) sessions. Previously, if the MTU decreased after a session was established, ICA traffic might become fragmented, resulting in performance degradation or disconnects. Citrix Workspace app now continuously monitors for MTU changes and automatically re-discovers the optimal MTU when a lower value is detected, improving session reliability and stability for users on networks with asymmetric routing or dynamic path changes, such as load-balanced proxy environments.

To disable it using the terminal command, run the following:

defaults write com.citrix.receiver.nomas EnableMtuRediscovery -bool false
<!--NeedCopy-->

To disable this feature through MDM, use the following setting:

<key>EnableMtuRediscovery</key><false/>
<!--NeedCopy-->

Streaming read and write for Client Drive Mapping (CDM) (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac supports read and write streaming for Client Drive Mapping, significantly improving file transfer performance over high-latency connections.

• Read streaming: Large file reads from the client are delivered as a multi-packet chunked response in a single request, eliminating repeated round-trips.
• Write streaming: Large file writes from the host are accumulated in memory and flushed to disk in a single OS write call, reducing round-trips.

Previously, file operations on mapped client drives involved many small synchronous round-trips, causing slow performance for users connecting from remote locations.

To enable it using the terminal command, run the following:

defaults write com.citrix.receiver.nomas EnableCDMReadWriteStream -bool YES
<!--NeedCopy-->

To enable this feature through MDM, use the following setting:

<key>EnableCDMReadWriteStream</key><true/>
<!--NeedCopy-->

HDX Direct for Shield V2 (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac supports HDX Direct connections for sessions launched using Shield V2 connection leases. During a cloud outage, these sessions can establish a direct connection to the Virtual Delivery Agent (VDA), bypassing the Citrix Secure Gateway when a direct route is available. This results in lower latency and improved session performance. Auto Client Reconnect (ACR) is also supported on these HDX Direct sessions.

To configure this feature:

1. Ensure that you have a Shield V2 environment.
2. Set the HDX direct DDC policy to Allow.

To enable this feature using the terminal command, run the following:

defaults write com.citrix.receiver.nomas EnableShieldHDXDirect -bool YES
<!--NeedCopy-->

To enable this feature through MDM, use the following setting:

<key>EnableShieldHDXDirect</key><true/>
<!--NeedCopy-->

HDX graphics super resolution (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac supports HDX graphics super resolution. HDX graphics super resolution seamlessly downscales video regions on the Virtual Delivery Agent (VDA) and uses the Mac client’s hardware to upscale them back to their original resolution without noticeable quality degradation or performance impact. This reduces the network bandwidth required for high-quality video while preserving visual fidelity.

This feature requires the following:

• macOS 26 (Tahoe) or later
• The H.265/XDecoder graphics path enabled (enabled by default)
• VDA configured for HDX graphics super resolution. HDX graphics super resolution is enabled by default in automatic mode starting with CVAD 2603. Use the HDX graphics super resolution Citrix Studio policy to control this behavior.

Note:

This feature is disabled by default on the Mac client.

To enable this feature using the terminal command, run the following:

defaults write com.citrix.receiver.nomas EnableSuperResolution -bool YES
<!--NeedCopy-->

To enable this feature through MDM, use the following setting:

<key>EnableSuperResolution</key><true/>
<!--NeedCopy-->

Location redirection for virtual sessions (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac supports redirecting the client device’s geographic location to the virtual session. Server-side applications running in the session, such as Maps, can access the end user’s real-world location as if the application were running locally. This feature is also known as Location Redirection or Device Sensor Redirection.

This feature requires the following:

• macOS 11 or later
• A Windows VDA that supports location redirection. For multi-session VDAs, Windows 22H2 or later with Citrix GeoLocSync enabled.

This feature is disabled by default and requires all three components — VDA, DDC, and client — to be enabled. To configure it:

1. On the VDA, navigate to Privacy & security > Location and enable Location services and Let apps access your location. Then enable the following based on the VDA type:

   • Single-session VDA: Allow location override
   • Multi-session VDA (Windows 22H2 or later): Citrix GeoLocSync

2. On the DDC, navigate to User setting > ICA > Client Sensors > Location and set the Allow applications to use the physical location of the client device policy to Allowed. This policy is set to Prohibited by default.

3. On the client, in System Settings > Privacy & Security > Location Services, turn on Location Services and enable location access for Citrix Viewer. Then run the following command and restart Citrix Workspace app for the change to take effect:

   defaults write com.citrix.receiver.nomas EnableGEORedirection -bool YES
   <!--NeedCopy-->
   

To enable this feature through MDM, use the following setting:

<key>EnableGEORedirection</key><true/>
<!--NeedCopy-->

Note:

On the first location request in a session, the user is prompted to Allow or Don’t Allow. If the user selects Don’t Allow, the VDA receives an Access-Denied status and no location data is shared for that session.

Enhanced call connect times with Unified Communications SDK

Starting with version 2607, the Unified Communications SDK (UCSDK) 5.0.0 introduces a Smart Sync feature that reduces call connection times by streamlining communication between the VDA and the client endpoint. This delivers faster call setup across all network conditions, with the most significant improvements in high-latency environments.

Citrix recommends that customers work with their UC application vendors to upgrade to UCSDK 5.0.0. For more information, see Unified Communications SDK optimization.

Resilient and secure third-party plugin execution (Technical Preview)

Starting with version 2607, Citrix Workspace app for Mac introduces the plug-in Manager, a general out-of-process host for third-party virtual-channel plugins built against the Citrix Virtual Channel SDK (VCSDK).

Previously, plug-ins ran inside the same process as the Citrix session. This meant that a plugin crash could bring down the entire session, forcing users to reconnect and lose their work. With plug-in Manager, plug-ins run in a dedicated isolated process, separate from the session:

• Sessions survive plugin crashes: If a plug-in such as Teams VDI encounters an error, it recovers automatically without disrupting the user’s session or requiring a reconnect to the VDA.
• Stronger session security: The session process runs with full macOS security hardening enabled. Plug-ins are isolated so that a misbehaving or compromised plug-in cannot affect the session or other running applications.
• No changes required for existing plugins: The architecture is fully backward compatible. Existing plug-ins work without modification.

Note:

This feature is in Technical Preview and is not recommended for production use. Feedback can be submitted through the Citrix Feedback portal.

To enable this feature through MDM, use the following setting:

<key>EnablePluginBroker</key><true/>
<!--NeedCopy-->

OAuth redirection support for Bidirectional content redirection

Starting with Citrix Workspace app for Mac 2607, bidirectional content redirection supports OAuth authentication flows. When a user opens an OAuth-protected URL from a VDA session, the bidirectional content redirection policy intercepts the URL and redirects the authentication request to the local Mac endpoint. The user provides credentials on the Mac. After successful authorization, the OAuth callback URL (containing the authorization code or token) is redirected back to the VDA to complete the flow.

For more information, see Bidirectional content redirection policy settings

Limitations

• OAuth Redirection: Due to macOS security requirements for notarized applications, custom OAuth callback URL schemes must be pre-registered with Citrix and cannot be changed dynamically post-installation. Only citrix-oauth-redir is supported by default. Please reach out to the Citrix Product team to register your URL scheme.

Adaptive Webcam Bitrate

Starting with version 2607, Citrix Workspace app for Mac automatically adjusts webcam video quality to match available network bandwidth in real time. The client continuously monitors network conditions and adapts the webcam stream accordingly — reducing bitrate when the network is constrained and restoring quality as bandwidth recovers.

This feature requires no configuration, reduces video freezing, and maintains video continuity, providing an optimal webcam stream and ensures that meetings and calls remain usable on variable networks.

Health checker tool for CAM and MDM Policy (Technical Preview)

When Citrix Client app management (CAM) policies do not take effect on Mac endpoints, diagnosing the cause has historically required collecting logs, running manual network tests, and comparing configuration files by hand — a process that requires intense effort and analysis.

The Config Checker tool now includes a dedicated CAM health check. In a single run, it actively verifies the full CAM delivery chain directly on the device:

• Endpoint reachability: Confirms the CAM discovery URL and service endpoint are reachable from the device.
• Settings fetch: Verifies whether store settings can be retrieved from the configured endpoint and, if not, identifies where in the chain the failure occurs.
• Applied settings: Displays the key-value pairs currently served by CAM for the device’s domain.
• Override detection: Flags whether local user preferences or MDM profiles are overriding any CAM-delivered values.
• Config comparison: Compares the latest settings available from CAM against the settings currently stored on the device and highlights any differences.
• Fetch timestamp: Shows when the device last successfully retrieved CAM settings.
• Report export: Allows the results to be saved as a file for sharing with support or for auditing across a fleet.

This feature is in Technical Preview and disabled by default. To enable it for testing and feedback, run the following command:

defaults write com.citrix.receiver.nomas EnableConfigChecker -bool YES
<!--NeedCopy-->

Fixed issues

There are no new fixed issues in the release.

Known issues

There are no new known issues in the release.