TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
Objective
This feature is an important change to the secure communication protocol. Cipher suites with the prefix TLS_RSA_ do not offer forward secrecy and are considered weak. These cipher suites were deprecated in Citrix Receiver version 13.10 with an option for backward compatibility.In this release, the TLS_RSA_ cipher suites have been removed entirely. Instead, this release supports the advanced TLS_ECDHE_RSA_ cipher suites. If your environment is not configured with the TLS_ECDHE_RSA_ cipher suites, client launches are not supported due to weak ciphers.
This document aims to detail the changes to the cipher suites.
What’s New?
The following advanced cipher suites are supported:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
In earlier releases, the GPO configuration that was available under the below Computer Configuration node which allowed to enable the deprecated cipher suites has been removed now.
Administrative Template > Citrix Component > Citrix Workspace > Network Routing > Deprecated Cipher Suites
The following cipher matrix provides the ciphers supported by the latest SSL SDK:
Expected failure scenarios and edge cases
TCP
OPEN mode: Session launch is not supported when the client is configured for GOV and the VDA for COM. This happens because a common cipher suite is absent.
- FIPS/NIST(SP800-52) compliance mode: Session launch is not supported when the VDA is configured for COM the client for COM, GOV, or ANY, or the other way around. This happens because a common cipher suite is absent.
- DTLS v1.0 supports the following cipher suites:
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_EMPTY_RENEGOTIATION_INFO_SCSV
- DTLS v1.2 supports the following cipher suites:
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_EMPTY_RENEGOTIATION_INFO_SCSV
- Therefore, session launch is not supported from a client configured for GOV to a VDA configured for COM. Also, fallback to TCP is not supported. When you use DTLS v1.0, session launch is not supported for clients configured for GOV because a common cipher suite is absent.
- DTLS does not support FIPS/NIST compliance modes.
- DTLS v1.2 is supported by Windows 10 (1607 and later) and Windows 2016 VDAs. For more information, see Knowledge Center article https://support.citrix.com/article/CTX230010.
- DTLS v1.2 is not supported by Citrix Gateway. This scenario can be tested only with DTLS v1.0. For Citrix Gateway ciphers troubleshooting, see Knowledge Center article https://support.citrix.com/article/CTX235509.
The following matrices provide details of internal and external network connections:
- Matrix for internal network connections (Citrix Gateway scenario)
- Matrix for external network connections (Citrix Gateway scenario)
Note: When NetScaler Gateway is used
- For the EDT to work, NetScaler Gateway must be of version 12.1 or higher since the older versions doesn't support ECDHE cipher suites in DTLS mode.
- NetScaler Gateway doesn't support DTLS 1.2 so TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 are not supported and NetScaler Gateway must be configured to use TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA for it to work in DTLS 1.0
Citrix Receiver (now renamed Citrix Workspace) is client software that allows users to connect virtualized desktops and apps from their end devices. Because of notoriously complex infrastructure, tasks such as uninstalling Citrix Receiver on Mac can be a challenging undertaking.
Just like typical applications, Citrix Receiver has a special uninstallation script that directs the removal process. While you would expect the uninstallation process to remove the right files and all the registry entries—this is usually not the case with Citrix Receiver. Sometimes, the process can go wrong; for instance, “Follow Me Data” files can be left behind due to unexpected error(s).
Instructions
Follow the steps below to uninstall Citrix Receiver on Mac device:
- Locate the “.dmg” file and double-click on it. In this case, the “.dmg” file refers to the file you downloaded from Citrix when installing Citrix Receiver for the first time. In case you can’t locate it, point your browser to Citrix Downloads to download it again.
- Click the “Uninstall Citrix Workspace App.”
- Follow the on-screen steps to finish the uninstallation process.

- Reboot your system after uninstalling Citrix Receiver on Mac.
How to remove Follow Me Data notes
In some instances, “Follow Me Data” files are left behind even after uninstalling and rebooting the computer due to unexpected error(s). Follow these steps to manually remove such files:
- Navigate to the following locations and manually delete the corresponding file:

- ~/Applications/Citrix/FollowMeData A
- ~/Library/Application Support/ShareFile
- ~/Library/PreferencePanes/FMDSysPrefPane.prefPane
- Navigate to the locations below and erase the corresponding file:
- /private/var/db/receipts/com.citrix.ShareFile.installer.plist
- /private/var/db/receipts/com.citrix.ShareFile.installer.bom
- Delete the following files if they haven’t been cleaned:
- ~/ShareFile
- /private/var/db/receipts
- com.citrix.ShareFile.installer.plist
- com.citrix.ShareFile.installer.bom
Cleaning up your file system after uninstall
After uninstalling Citrix Receiver and rebooting the system, ensure that you remove all folders and files listed below. If these files and folders are not removed successfully, you must do so manually.
- /Applications-Citrix Receiver.app
- ~/Applications – Delete the applications under this folder that you previously added via the Receiver UI.
- /Library- /Internet plug-ins/CitrixICAClientPlugIn.plugin
- /Library- /LaunchAgents/com.citrix.AuthManager_Mac.plist
- /Library- /LaunchAgents/com.citrix.ServiceRecords.plist
- ~/Library-/Internet plug-ins/CitrixICAClientPlugIn.plugin
- ~/Library- /Application Support/Citrix Receiver- CitrixID
- ~/Library- /Application Support/Citrix Receiver- Config
- ~/Library- /Application Support/Citrix Receiver- Module
- ~/Library- /Preferences/com.citrix.receiver.nomas.plist
- ~/Library- /Preferences/com.citrix.receiver.nomas.plist.lockfile
- ~/Library- /Preferences/com.citrix.ReceiverFTU.AccountRecords.plist (added in 11.6)
- ~/Library- /Preferences/com.citrix.ReceiverFTU.AccountRecords.plist.lockfile (added in 11.6)
- /private/var/db/receipts- com.citrix.ICAClient.bom
- /private/var/db/receipts- com.citrix.ICAClient.plist
Notes:
- Depending on the Receiver version(s), some of the above mentioned folders might not exist in the system.
- A tilde (~) before the folder path indicates the folder’s location in the user profile. A folder path without the tilde indicates the system-wide version of the folder at the system root.
- Some folders mentioned above can be hidden directories.
Parallels RAS is an affordable alternative to Citrix
Citrix Receiver has undergone many changes—from the days it was referred to as ICA Client to the current Citrix Workspace app. However, its configuration and management across many endpoints are a big challenge. Multiple products and components can be confounding to users.
Download Citrix Workspace 2006
Parallels® Remote Application Server (RAS) is a seamless, all-in-one VDI platform. It allows you to access virtual desktops and apps on a remote server from any device and OS. Parallels RAS requires fewer resources to run, is simple to use, and is less costly. It’s also easier to manage and scale-up. In addition, you have access to a stable upgrade path since the entire infrastructure can be deployed within minutes.
The outstanding user experience of Parallels RAS is an additional factor that makes it a better alternative to Citrix. Braid mac download. It has an intuitive and consistent user experience across all devices and even on mobiles. It offers native gesture capabilities and allows users to multitask on any device. You can use it to print from any device using local printers and use custom keys to simplify common keystrokes.
Parallels RAS allows easier interaction and readability for applications that fit the entire screen. You can use it to maximize smartphone capabilities, and drag and drop files from servers to the client to increase productivity. Additional capabilities like ultra-fast login, white labeling, local drive redirection, and consistent multi-monitor window positions make Parallels RAS an affordable yet one of the best solutions.
References
Citrix Workspace 2006 Windows
Mac Uninstall Guide | https://macuninstallguides.com/remove-citrix-receiver-12-8-1-on-mac.html
Parallels RAS | https://www.parallels.com/fileadmin/docs/ras/resources/WP_MigrationfromCitrix_EN_A4.pdf




