The Global App Configuration Service: A “Hidden Champion” for Citrix Administrators

Hybrid workplaces, Bring-Your-Own-Device (BYOD), different devices and operating systems – but no central management: Does this sound familiar? Many Citrix customers struggle to keep software versions and user settings up-to-date and consistent across all devices. Citrix offers a very helpful service that enables exactly this: The Global App Configuration Service is, in my opinion, a much underutilized tool that Citrix administrators should definitely take a closer look at.

What is the Global App Configuration Service?

The Global App Configuration Service (GACS) from Citrix is a cloud-based service that helps companies uniformly configure and manage the Citrix Workspace App and other apps. Settings and updates can be centrally controlled across different operating systems. The service supports common operating systems like Windows, macOS, Android, iOS, and Chrome OS, ensuring that all users automatically use the latest versions of the apps. This is particularly important for hybrid work environments and BYOD models. Whether a company operates its IT in the cloud or on-premises, GACS can be integrated into both scenarios. The service ensures that all users, regardless of their location or the technology used, always have access to the correct apps and settings. In the future, GACS will also allow work environments to be tailored to the individual needs of users by setting configurations for specific groups or devices. These settings determine, for example, how users access virtual apps and desktops or how apps are used in the Citrix Enterprise Browser.

How does GACS work?

GACS includes three essential services that companies can use as needed:

• Auto Discovery Service: This service allows companies to link their domain with the store URL so that users can simply log in with their email address instead of a complicated URL. The service distributes the settings and validates the domain in the background. To use this service in on-premises environments, the store URL must be claimed to establish a secure connection.
• Auto-Update Service and Agent Management: GACS enables the central management and automatic updating of various agents used for services like Endpoint Analysis (Citrix Endpoint Analysis Client – EPA) or Zero Trust Network Access (ZTNA). In addition to the Workspace App, third-party clients like Zoom or Webex can also be managed through GACS. The auto-update service ensures that all users use the app versions specified by IT, which can vary depending on the operating system.
• Management of Client App Settings: All end-user settings of the Citrix Workspace App can be centrally managed through GACS. This includes settings for the login process, security and authentication options, configurations for virtual apps and desktops, as well as policies for peripherals, data collection, and monitoring. Specific settings for the Citrix Enterprise Browser and app protection can also be controlled via GACS. These settings are typically updated every six hours or during specific events, such as an app restart.

What are typical use cases for GACS?

From many customer projects, we know that managing client apps and settings across various managed and unmanaged devices often causes headaches for IT departments. Administrators often find it tedious to manage both Citrix-specific agents like EPA and third-party tools like Zoom or Webex and ensure they are always up-to-date. Additionally, there is no easy way to keep the versions of the Citrix Workspace App consistent across different operating systems, plan updates, or quickly revert to previous versions if needed. Especially in BYOD scenarios, there is a lack of efficient tools to reliably enforce the necessary security policies and settings on unmanaged devices. Traditional UEM/MDM solutions usually cannot achieve this. GACS therefore offers enormous value, particularly for BYOD and hybrid work environments. With the service, administrators can centrally control all important app settings, regardless of whether the device is managed by the company or not. All user groups then work with the same predefined settings, no matter what operating system or device they use. For example, uniform security policies can be enforced for internal and external users at different locations. With GACS, IT administrators can ensure that users only access authorized app versions and use security features like multi-factor authentication or VPN connections. Automatic updates of applications like the Citrix Workspace App reduce the risk of security vulnerabilities due to outdated software and ensure a consistent user experience across all devices.

What should be considered when implementing GACS?

To use GACS, certain prerequisites must be met. Currently, GACS is available to all Citrix Virtual Apps and Desktops or Citrix DaaS customers who are entitled to Citrix Cloud. IT administrators with a Citrix Cloud account can use GACS to configure settings for Citrix Workspace and Citrix StoreFront stores. For on-premises stores, additional steps must be taken to claim the URL. Since the Citrix Workspace App retrieves the settings from a Content Delivery Network (CDN), all users must have internet access. Otherwise, the default application settings are used. GACS allows settings to be configured for each store separately if a customer has multiple stores. Administrators can also test the settings in advance to resolve any issues before the configuration is applied to all users.

What’s next? Outlook on the development of GACS

Citrix is currently working on two innovations for future releases of GACS. Currently, the GACS settings are retrieved by the Citrix Workspace App (CWA) client for the added store from an endpoint URL. Users can download the settings. In the future, it will be possible to apply these settings only when the user is authenticated to ensure secure transmission and application of the configurations on the endpoints. Additionally, all settings are currently applied at the store level. But what happens if different user groups access the same store and specific settings are required for each user group? This use case is currently not supported. In a future version, GACS will be able to recognize the user’s AD group and provide group-specific settings.

Conclusion: GACS – an underrated service with great potential

The Global App Configuration Service from Citrix offers companies an efficient way to manage their Citrix environments and enforce security policies, especially in BYOD scenarios. Despite its great potential, this service is, in my opinion, still underutilized and not well-known among many IT professionals. Feel free to contact us if you want to learn more about GACS.