Citrix Workspace App for Linux: Install, Set Up and Fix Errors

Citrix Workspace app for Linux is the free client that connects a Linux PC to virtual desktops and apps published by an organization through Citrix. To install it on Ubuntu or Debian, download the icaclient .deb package from the Citrix download page and run sudo apt install -f ./icaclient_<version>_amd64.deb. On Red Hat, Fedora and SUSE, use the RPM package, and on other distributions the tarball installer.

This guide covers supported distributions, installation on each package type, the first connection, the common SSL certificate error and how to uninstall the app.

What Citrix Workspace app for Linux does

Citrix Workspace app is a client, not a workspace by itself: it opens the Windows desktops and applications your employer, school or hosting provider runs on Citrix servers. Your organization gives you a store address or a Citrix Workspace URL; the app signs you in, lists the resources you may use and opens them in windows on your Linux desktop.

The app was called Citrix Receiver until 2018. Citrix names versions after the year and month of release, so version 2604 is the April 2026 release.

Supported Linux distributions and requirements

Citrix lists these 64-bit platforms as supported in its system requirements for current releases:

Other distributions such as Linux Mint, Fedora and Arch often work with the same packages or the tarball, but Citrix does not support them officially. The app needs an X11 session; Wayland is not supported, so choose an X11 or Xorg session on the login screen if the app fails to display sessions. On Ubuntu 26.04, install gnome-keyring, libsecret-1-0, dbus-x11 and net-tools first.

Install on Ubuntu and Debian

Install the .deb package with apt, which also installs missing dependencies:

1. Download the latest Debian package (full package, x86_64) from the Citrix download page.
2. Open a terminal in the download folder.
3. Run sudo apt install -f ./icaclient_<version>_amd64.deb, replacing the file name with the downloaded one.
4. Accept the prompts. If the installer asks whether to enable App Protection, choose No unless your organization requires it.

If your organization uses USB redirection, install the matching ctxusb package of the same version as well.

Install on Fedora, Red Hat and SUSE

Use the RPM package that matches your distribution family:

• Red Hat Enterprise Linux and Fedora: sudo yum localinstall ICAClient-rhel-<version>.x86_64.rpm (enable the EPEL repository first on RHEL).
• SUSE and openSUSE: sudo zypper install ICAClient-suse-<version>.x86_64.rpm

Install with the tarball

The tarball works on most other distributions but does not install dependencies. Extract it into an empty folder with tar xvfz linuxx64-<version>.tar.gz, run ./setupwfc, choose option 1 to install and accept the default path. Run it as root to install for all users in /opt/Citrix/ICAClient, or as a normal user to install into your home folder.

First connection

Start Citrix Workspace from your application menu and enter the store or Workspace URL your organization gave you, then sign in. Your desktops and apps appear in the app and open with a click.

Some organizations instead give you a web portal. Sign in there in your browser and open the downloaded .ica file with Citrix Workspace app; the browser can remember this choice for future launches.

Fix SSL error 61 and other certificate errors

SSL error 61 ("You have not chosen to trust the issuer of the server's security certificate") means the app does not trust the certificate authority of your organization's server. The Linux client uses its own certificate store in /opt/Citrix/ICAClient/keystore/cacerts instead of the system store.

The usual fix is to make the system's certificate authorities available to the client and rebuild the index:

1. Run sudo ln -s /etc/ssl/certs/*.pem /opt/Citrix/ICAClient/keystore/cacerts/
2. Run sudo /opt/Citrix/ICAClient/util/ctx_rehash
3. Restart Citrix Workspace app and connect again.

If your organization uses a private certificate authority, ask IT for the root certificate in PEM format, copy it into the same cacerts folder and run ctx_rehash again.

Update and check the installed version

Citrix Workspace app for Linux does not update itself through the system's package sources. Download the new package and install it over the old one with the same command. To see the installed version, run cat /opt/Citrix/ICAClient/pkginf/Ver.core.linuxx64 or dpkg -l | grep -i icaclient on Debian-based systems.

Uninstall Citrix Workspace app

Remove the app with the package manager you used to install it:

• Ubuntu and Debian: sudo apt purge icaclient
• Fedora and Red Hat: sudo yum remove icaclient
• Tarball: run $ICAROOT/setupwfc and choose option 2.

Leftover settings are stored in the hidden .ICAClient folder in your home directory; delete it for a completely clean removal.

FAQ