Citrix Endpoint Management (aka XenMobile Server) 10.12.0 Rolling Patch 6

Package name: xms_10.12.0.10613.bin
For: XenMobile Server 10.12.0
Deployment type: On-premises only
Replaces: xms_10.12.0.10102.bin, xms_10.12.0.10204.bin, xms_10.12.0.10324.bin, xms_10.12.0.10417.bin, and xms_10.12.0.10539.bin
Replaced by:CTX303096
Date: January, 2021
Languages supported: English (US)
Readme version: 1.00

Readme Revision History

Version	Date	Change Description
1.00	January, 2021	Initial release

Important Notes about This Update

As a best practice, Citrix recommends that you install this and other updates only if you are affected by the specific issues they resolve.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, seeXenMobile Server 10.12on the Citrix Product Documentation site.

What's new

Automatically update managed Google Play apps.This new policy allows you to restrict the ability of users to configure automatic app updates for managed Google Play apps on Android Enterprise devices. You can allow users to configure the policy. Or, you can specify that automatic updates apply always, never, or only when a device is connected to Wi-Fi.

[From xms_10.12.0.10613.bin][CXM-90842]

What's new from Replaced Releases

• Apple support for the Apple Push Notification service legacy binary protocol ends as of November 2020. Apple recommends that you use the HTTP/2-based APNs provider API instead. As of this release, XenMobile Server supports the HTTP/2-based API. The server propertyapple.apns.http2allows you to toggle between HTTP and HTTP/2. In order to enable HTTP/2, add this custom server property and set it astrue. For more information, see the news update, "Apple Push Notification Service Update" inhttps://developer.apple.com/. For help with checking connectivity to APNs, seeConnectivity checks.

  [From xms_10.12.0.10204.bin][CXM-79788]

• The Secure Hub Apple Push Notification Service (APNs) certificate for XenMobile Server 10.12 expires on July 12, 2020. As a result, the agent notification fails and the application push might be delayed on iOS devices. This update renews the Secure Hub APNs certificate with an expiration date of June 17, 2021.

  [From xms_10.12.0.10324.bin][CXM-80942]

• Enable automatic updates on Apple Volume Purchase apps with the程序自动更新setting. IfOn, volume purchase apps automatically update when an update exists on the Apple store. Default isOff.

  [From xms_10.12.0.10324.bin][CXM-81423]

• Publish enterprise apps for Android Enterprise in the XenMobile Server console.你不再需要注册一个谷歌玩developer account when you add an Android Enterprise private app. The XenMobile Server console opens a managed Google Play store UI for you to upload and publish the APK file. For more information, seeAdd an enterprise app.

  [From xms_10.12.0.10417.bin][CXM-84777]

• Allow static or dynamic MAC addresses.As part of the Wi-Fi policy, iOS and iPadOS devices can now use a different MAC address each time they connect to the configured Wi-Fi network. You can also choose to have the MAC address remain static. However, using a dynamic MAC address makes it more difficult to identify the device consistently, enhancing privacy. SeeWi-Fi policy.

  [From xms_10.12.0.10539.bin][CXM-86927]

Known Issue(s) in this Release

There are no known issues in this release.

New Fix in This Update

Deployment of Volume Purchase Program (VPP) apps using device licenses fails on devices running macOS version 11, if you haven't logged in to the App Store.

[From xms_10.12.0.10613.bin][CXM-90490]

Fixes From Replaced Releases

1. Unable to upload iOS public apps in the App Store using App Store URL.

   [From xms_10.12.0.10102.bin][CXM-76899]

2. Role-based access control (RBAC) fails to restrict admins from exporting enrollment invitations to users outside the intended recipient group.

   [From xms_10.12.0.10102.bin][CXM-77609]

3. Unable to upload public apps in the App Store using public API. You get the following error:Store URL is invalid

   [From xms_10.12.0.10102.bin][CXM-77665]

4. User ID on a single device is mapped to several user IDs.

   [From xms_10.12.0.10102.bin][CXM-78010]

5. Intermittent deadlocks in the database server cause enrollment failures.

   [From xms_10.12.0.10102.bin][CXM-78747]

6. You can't use the XenMobile Server 10.10 console to edit the Exchange device policy if the policy is configured on XenMobile Server 9.

   [From xms_10.12.0.10204.bin][CXM-79090]

7. Apple iTunes volume purchase apps can't synchronize with XenMobile.

   [From xms_10.12.0.10204.bin][CXM-80096]

8. For a few installed apps, the version is blank for the app inventory shown on theManage > Devices > Device Detailspage.

   [From xms_10.12.0.10204.bin][CXM-80392]

9. You can't use the XenMobile Server console to update the version for some VPP apps. You get the following error:A configuration error occurred. Please try again.

   [From xms_10.12.0.10204.bin][CXM-80400]

10. Required and optional MDX apps added post enrollment are not displayed in Play Store.

    [From xms_10.12.0.10204.bin][CXM-81281]

11. You can't access the XenMobile Server console using customized ports.

    [From xms_10.12.0.10324.bin][CXM-81840]

12. You can't configure multiple bookmarks due to the character limit in theManaged bookmarksfield.

    [From xms_10.12.0.10324.bin][CXM-82547]

13. The Android Enterprise configuration isn't available on the XenMobile Server console.

    [From xms_10.12.0.10324.bin][CXM-83475]

14. You are unable to import the enterprise.config file on the XenMobile Server. You get the following error:Failed to import certificate.

    [From xms_10.12.0.10324.bin][CXM-83722]

15. On the XenMobile Server,Check for Updatesdoesn't work for App details.

    [From xms_10.12.0.10417.bin][CXM-84488]

16. The mobile device management (MDM) enrollment of devices running iOS 14 fails consistently when the server propertyios.mdm.enrollment.installRootCaIfRequiredis set to true.

    [From xms_10.12.0.10417.bin][CXM-85030]

17. On the XenMobile Server, you can't install apps from Managed Google Play when you enrol withSamAccountName.

    [From xms_10.12.0.10417.bin][CXM-85034]

18. Enrollment of Apple Deployment Programs (formerly DEP) fails on Apple devices when Generic PKI is configured.

    [From xms_10.12.0.10539.bin][CXM-86601]

19. Additional permissions are required to edit enrollment profiles, when you log in with role-based access control (RBAC).

    [From xms_10.12.0.10539.bin][CXM-87178]

20. Two PKC12 certificates are created for the same user, resulting in intermittent access to the internal network for that user.

    [From xms_10.12.0.10539.bin][CXM-87284]

21. On Android Enterprise devices, you are unable to edit Managed Apps on Chrome.

    [From xms_10.12.0.10539.bin][CXM-87285]

22. Upgrading to certain versions of Citrix ADC causes Android devices and Android Enterprise devices to fail enrollment. For more information, seehttps://support.citrix.com/article/CTX285195

    [From xms_10.12.0.10539.bin][CXM-88640]

23. Upon upgrading to XMS 10.12, there are problems with the dashboard view on the XenMobile Server console.

    [From xms_10.12.0.10539.bin][CXM-89082]

24. Enrollment of Android Enterprise devices withSamAccountNamefails, and you get the following error:工作概要文件删除,擦拭profile.

    [From xms_10.12.0.10539.bin][CXM-89087]

Installing This Update

Note: If your system is configured in cluster mode, follow the steps below to update each node, one after the other.

Important:Before installing this update, take a snapshot of the current settings and create a backup of the database.

1. Log on to your account on the Citrix website and download the XenMobile Server update (.bin) file to an appropriate location.
2. In the XenMobile Server Console of a node clickSettings>Release Management. The Release Management page appears, which displays the currently installed software version, as well as a list of any updates, patches, and upgrades you have already uploaded.
3. Under Release Management, clickUpdate. The Update dialog box appears.
4. ClickBrowseto upload the update (.bin) file you have downloaded from support.citrix.com.
5. Click Update and then if prompted, restart the XenMobile Server node using command line.

To verify the patch deployment

After installing this patch, log on to the XenMobile Server Console as an administrator, then navigate toSettings >Release Management>Updates. Information about the most recent successful patch installation appears in this section.