Configuration of the deviceTRUST Client Extension virtual channel for ICA

This article details the files and configuration involved in the registration of the deviceTRUST Client Extension virtual channel for the ICA protocol on Microsoft Windows, Ubuntu and Apple macOS platforms.

Microsoft Windows (All Users)

The following registry entries are required for the All Users install of Citrix Workspace:

"HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\ICA Client\Engine\Configuration\Advanced\Modules\ICA 3.0"
VirtualDriverEx (REG_SZ) = deviceTRUST

"HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\ICA Client\Engine\Configuration\Advanced\Modules\deviceTRUST"
DriverName (REG_SZ) = Unsupported
DriverNameWin16 (REG_SZ) = Unsupported
DriverNameWin32 = dtclient.dll

Additionally, the installation folder identified by "HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Citrix\Install\ICA Client" value InstallFolder (REG_SZ) and defaulting to "C:\Program Files (x86)\Citrix\ICA Client" must contain a copy of the 32-bit dtclient.dll from "%ProgramFiles(x86)%\deviceTRUST\Client\Bin\dtclient.dll".

All of the above registry keys and the file on disk are monitored by the 'dtclient' Windows Service. If any of the values are modified then they are automatically reverted to their correct values.

Microsoft Windows (Per User)

The following registry entries are required for the Per User install of Citrix Workspace:

"HKEY_CURRENT_USER\SOFTWARE\WOW6432Node\Citrix\ICA Client\Engine\Configuration\Advanced\Modules\ICA 3.0"
VirtualDriverEx (REG_SZ) = deviceTRUST

"HKEY_CURRENT_USER\SOFTWARE\Citrix\ICA Client\Engine\Configuration\Advanced\Modules\deviceTRUST"
DriverName (REG_SZ) = Unsupported
DriverNameWin16 (REG_SZ) = Unsupported
DriverNameWin32 = dtclient.dll

Additionally, the installation folder identified by "HKEY_CURRENT_USER\SOFTWARE\Citrix\Install\ICA Client" value InstallFolder (REG_SZ) and defaulting to "C:\Program Files (x86)\Citrix\ICA Client" must contain a copy of the 32-bit dtclient.dll available at "%ProgramFiles(x86)%\deviceTRUST\Client\Bin\dtclient.dll".

All of the above registry keys and the file on disk are monitored by the 'dtclient' Windows Service. If any of the values are modified then they are automatically reverted to their correct values.

Apple macOS

The file "~/Library/Application Support/Citrix Receiver/Modules" must contain the following entries:

[ICA 3.0]
VirtualDriver=deviceTRUST
deviceTRUST=On

[deviceTRUST]
DriverName=dtclient.dll

Additionally the folder "/Library/Application Support/Citrix/PlugIns/deviceTRUST" must contain the deviceTRUST virtual channel extension for Citrix ICA.

Neither the Modules file or the files on disk are monitored for incorrect values. To repair, perform an uninstall and reinstall of the installation.

If using an Apple M1 or later processor, please refer to deviceTRUST + Apple M1 support for Citrix Workspace.

Ubuntu

The module.ini file at "/opt/Citrix/ICAClient/config/module.ini" must contain the following entries:

[ICA 3.0]
VirtualDriver=deviceTRUST
deviceTRUST=On

[deviceTRUST]
DriverName=dtclient.dll

Additionally, "/opt/Citrix/ICAClient/dtclient.dll" must be a symbolic link to "/opt/deviceTRUST/Client/Bin/libdtclient.so".

Neither the module.ini or the files on disk are monitored for incorrect values. To repair, perform an uninstall and reinstall of the installation.