What’s new in XenMobile Server 10.14
XenMobile Server 10.14(PDF Download)
Continued support for the Classic policies deprecated from Citrix ADC
Citrix recently announced the deprecation of some Classic policy based features starting with Citrix ADC 12.0 build 56.20. The Citrix ADC deprecation notices have no impact to existing XenMobile Server integrations with Citrix Gateway. XenMobile Server continues to support the Classic policies and no action is needed.
XenMobile Migration Service
If you’re using XenMobile Server on-premises, our free XenMobile Migration Service can get you started with Endpoint Management. Migration from XenMobile Server to Citrix Endpoint Management doesn’t require you to re-enroll devices.
To start migration, contact your local Citrix salesperson or Citrix partner. SeeXenMobile Migration Service.
Deprecation announcements
For advanced notice of the Citrix XenMobile features that are being phased out, seeDeprecation.
Before upgrading endpoints to iOS 14.5
Before upgrading any endpoint to iOS 14.5, Citrix recommends that you perform the following actions to mitigate app crashes:
- Upgrade Citrix Secure Mail and Secure Web to 21.2.X or higher. SeeUpgrade MDX or enterprise apps.
- If you use the MDX Toolkit, wrap all third-party iOS applications with MDX Toolkit 21.3.X or higher. Check the MDX Toolkitdownload pagefor the latest version.
Before you upgrade an on-premises Citrix ADC
Upgrading an on-premises Citrix ADC to certain versions can result in a single sign-on error. Single sign-on to Citrix Files or the ShareFile domain URL in a browser with theCompany Employee Sign inoption results in an error. The user is unable to sign in.
To work around this issue: If you haven’t already run the following command from the ADC CLI on Citrix Gateway, run it to enable global SSO:
`set vpn parameter SSO ON` `bind vpn vs -portalTheme X1`
For more information, see:
After you complete the workaround, users can authenticate to Citrix Files or the ShareFile domain URL using SSO in a browser with the Company Employee Sign-in option. [CXM-88400]
Before you upgrade to XenMobile 10.14 (on-premises)
Some systems requirements changed. For information, seeSystem requirements and compatibilityandXenMobile compatibility.
If the virtual machine running the XenMobile Server to be upgraded has less than 8 GB of RAM, we recommend increasing the RAM to at least 8 GB.
Update your Citrix License Server to 11.16 or later before updating to the latest version of XenMobile Server 10.14.
The latest version of XenMobile requires Citrix License Server 11.16 (minimum version).
Note:
客户成功服务日期(以前,苏bscription Advantage date) in XenMobile 10.14 is September 15, 2021. The Customer Success Services date on your Citrix license must be later than this date.
You can view the date next to the license in the License Server. If you connect the latest version of XenMobile to an older License Server environment, the connectivity check fails and you can’t configure the License Server.
To renew the date on your license, download the latest license file from the Citrix Portal and upload the file to the Licensing Server. SeeCustomer Success Services.
For a clustered environment: iOS policy and app deployments to devices running iOS 11 and later have the following requirement. If Citrix Gateway is configured for SSL persistence, you must open port 80 on all XenMobile Server nodes.
Recommendation: Before you install a XenMobile update, use the functionality in your VM to take a snapshot of your system. Also, back up your system configuration database. If you experience issues during an upgrade, complete backups enable you to recover.
To upgrade
With this release, XenMobile supports VMware ESXi 7.0. Ensure that you upgrade to 10.14 before installing or upgrading ESXi 7.0.
You can directly upgrade to XenMobile 10.14 from XenMobile 10.13.x or 10.12.x. To perform the upgrade, download the latest binary available: Go to//m.giftsix.com/downloads. Navigate toCitrix Endpoint Management (XenMobile) > XenMobile Server > Product Software > XenMobile Server 10. On the tile for the XenMobile Server software for your hypervisor, clickDownload File.
To upload the upgrade, use theRelease Managementpage in the XenMobile console. SeeTo upgrade using the Release Management page.
After you upgrade
If functionality involving outgoing connections stop working, and you haven’t changed your connections configuration, check the XenMobile Server log for errors such as the following: “Unable to connect to the VPP Server: Host name ‘192.0.2.0’ does not match the certificate subject provided by the peer”.
- The certificate validation error means you must disable host name verification on the XenMobile Server.
- By default, host name verification is enabled on outgoing connections except for the Microsoft PKI server.
- 如果主机名验证您的部署,change the server property
disable.hostname.verification
totrue
. The default value of this property isfalse
.
Platform support updates
iOS15:XenMobile Server and Citrix Mobile productivity apps are compatible with iOS 15, but don’t currently support any new iOS 15 features.
Android 12:XenMobile Server supports Android 12. For information about how the deprecation of Google Device Administration APIs impacts devices running Android 10+, seeMigrate from device administration to Android Enterprise. Also see thisCitrix blog.
Device policies
We added two settings to all Android Enterprise enrollment modes to more closely align with Google settings and to simplify configuration.
- Allow Bluetooth sharing:If unselected, users can’t establish outgoing Bluetooth sharing on their device.
- Allow app uninstall:Allows users to uninstall apps from within the Managed Google Play Store.
Also, we moved theAllow over-the-air upgradesetting from the Restrictions policy to the OS update policy.
For more information about these changes, seeRestrictions device policyandOS Update device policy.
The restriction settings for Android Enterprise have been reorganized for clarity. Sometimes, minor changes to setting names have been made. For more information about the reorganization, seeAndroid Enterprise settings.
You can now automatically update managed apps on Android Enterprise devices. For more information, seeAutomatically update managed apps device policy.
You can configure a list of file types that can be uploaded using the Files device policy. The following file types can’t be uploaded even if you add them to this allow list:
- .cab
- .appx
- .ipa
- .apk
- .xap
- .mdx
- .exe
For more information, seeServer properties
Device enrollment
You can now create different enrollment profiles for iOS and Android devices. XenMobile Server supports a number of enrollment profiles with different enrollment types. For more information, seeEnrollment profiles.
Fully managed Android 11+ devices enroll in work profile on corporate-owned devices mode. The new mode further separates the personal and work profiles on a device. This change offers an organization greater control on the managed profile and offers users more privacy on their personal profile. For more information, seeAndroid EnterpriseandServer properties.
You can now specify more setup screens to skip when users set up iOS or macOS devices.
- iOS
- Restore completed:Prevents users from seeing whether a restore completes during setup. For iOS 14.0 and later.
- Update completed:Prevents users from seeing whether a software update completes during setup. For iOS 14.0 and later.
- macOS
- Accessibility:Prevents the user from hearing Voice Over automatically. Only available if the device is connected to Ethernet. For macOS 11 and later.
- 生物识别:Prevents the user from setting up Touch ID and Face ID. For macOS 10.12.4 and later.
- True Tone:Prevents users from setting up four-channel sensors to dynamically adjust the white balance of the display. For macOS 10.13.6 and later.
- Apple Pay:Prevents users from setting up Apple Pay. If this setting is cleared, users must set up Touch ID and Apple ID. Ensure that theApple IDand生物识别settings are cleared. For macOS 10.12.4 and later.
- Screen Time:Prevents users from enabling Screen Time. For macOS 10.15 and later.
For more information about configuring setup options, seeDeploy devices through the Apple Deployment Program
- iOS
Display update log files
A new option calledDisplay update log fileis available in theLogscommand-line interface of theTroubleshooting Menu. This option allows you to see a list of the update log content, and increases the troubleshooting efficiency. For more information about the command-line interface tools, seeCommand-line interface options.
Error log file
When viewing logs atTroubleshooting and Support > Logs, you can now view a log that displays errors filtered from the debug log. For more information, seeView log files in XenMobile.
Server properties
You can decide whether legacy Android apps are delivered to Android Enterprise apps by configuring the
afw.allow.legacy.apps
server property. For more information, seeServer properties.XenMobile Server now supports using port 2197 as an alternative to port 443. You use port 2197 to send and receive APNs notifications from
api.push.apple.com
. The port uses the HTTP/2-based APNs provider API. The default value of the server propertyapns.http2.alternate.port.enabled
isfalse
. To use port 2197, update the server property and then restart the server.Password validation prevents users with weak passwords. When the property
enable.password.strength.validation
is set totrue
, you can’t create local users with weak passwords.
VPN virtual server list enhancement
If the VPN server name does not include_XM_XenMobileGetway
, then the XenMobile Server selects the first available VPN virtual server on the list.
Support for Citrix Launcher
XenMobile Server supports Citrix Launcher on Android Enterprise devices. For more information seeLauncher configuration device policy.
Color revamp for XenMobile Server
XenMobile Server is compliant with Citrix brand color updates.
In this article
- Continued support for the Classic policies deprecated from Citrix ADC
- XenMobile Migration Service
- Deprecation announcements
- Before upgrading endpoints to iOS 14.5
- Before you upgrade an on-premises Citrix ADC
- Before you upgrade to XenMobile 10.14 (on-premises)
- To upgrade
- After you upgrade
- Platform support updates
- Device policies
- Device enrollment
- Display update log files
- Error log file
- Server properties
- VPN virtual server list enhancement
- Support for Citrix Launcher
- Color revamp for XenMobile Server