Citrix licensing overview for XenApp, XenDesktop & NetScaler

This post explains briefly the licensing need-to-knows for XenApp/XenDesktop, PVS and NetScaler. Licensing can at times get confusing as most of you probably know. It can also change, so I’ll do my best to keep this updated.

What editions are available for XenDesktop?

XenDesktop 7.13 comes in three editions:

  • Platinum
  • Enterprise
  • VDI

What editions are available for XenApp?

XenApp 7.13 comes in four editions:

  • Platinum
  • Enterprise
  • Advanced
  • Secure Browser

What licensing models are available for XenApp?

Citrix XenApp Secure Browser, Advanced, Enterprise and Platinum editions come with a:

  • Concurrent licensing model.

What licensing models are available for XenDesktop?

XenDesktop comes with a:

  • User/Device model.
  • Concurrent User licensing model.

What is a Concurrent license model?

Concurrent counts for the number of people logged on at any given time. If you have 200 users logged on to Citrix XenApp, 200 licenses will be checked out from the Citrix License Server. If 50 users log off, those licenses are checked back in to the license pool.

Say for example you have 1000 staff but only around 300 are currently connected at any time. It may be cheaper to buy 300 Concurrent licenses than it would be to buy 1000 User/Device licenses.

What is a User/Device license model?

The Device/User model would be focused on the companies who have set shift patterns. Maybe you have 50 staff such as in a school that all work 9-5 Monday to Friday. Licenses are assigned to a User or Device for 90 days before being released back in to the pool. If a user uses multiple devices then the Citrix License Server assigns a user license. If a device is shared among multiple users then the Citrix License Server assigns a device license. This results in your licenses being assigned most efficiently. An administrator can revoke a license manually by using the udamin utility, quite like you can do with RDS CALs.

Note: The udadmin command line utility is found on your Licensing Server, within the LS directory.

What about LTSR versions of XenApp and XenDesktop?

LTSR for XenApp and XenDesktop uses the same editions as above however is a benefit of Customer Success Services (previously Software Maintenance). This means that customers must have this entitlement to run an LTSR version of XenApp and XenDesktop. What is LTSR? https://jgspiers.com/what-is-long-term-service-release/

XenDesktop licenses cover rights to run Session Based Server OS VDAs:

If you do purchase XenDesktop licenses, you also get XenApp rights. This means you can deploy XenApp hosted applications or desktops running on server Operating Systems and mix your site with virtual desktops running desktop Operating Systems. If you buy XenApp, you don’t get XenDesktop rights.

It is actually cheaper to purchase XenDesktop licenses, and since it gives you XenApp rights aswell you get dual benefits.

If you already have XenApp licenses, and want the ability to deliver XenDesktop down the line, you can use what is called the Citrix trade-up program which allows you to transform your XenApp licenses in to XenDesktop licenses. Citrix also have a two for one offer (at this time of writing) on trading XenApp licenses for XenDesktop. This means that for 250 XenApp licenses, you could get 500 XenDesktop User/Device licenses, or for 250 XenApp licenses you could get 250 Concurrent XenDesktop licenses. You could make savings of up to 60% or more. Citrix state that customers trading all their XenApp licenses at once will get the best savings. It is possible to trade a subset of XenApp licenses at any time.

  • Concurrent – This license is only consumed for the duration of the active session. A user can, on any device, make a connection to one virtual desktop and unlimited virtual applications. Once the user has finished and the session has ended the license is released back to the pool.
  • User/Device – Licenses are uniquely assigned to either a user or device. If assigned to a device, it allows unlimited user connections from that device. If assigned to a user, it allows that one user unlimited connections from any device.

Citrix License Server ports:

  • TCP 27000 – License Server port.
  • TCP 7279 – Vendor Daemon – strict licensing only.
  • TCP 8082 – Citrix License Administration Console.
  • TCP 8083 – Director and Studio license integration.

Citrix Success Services (previously Software Maintenance and Subscription Advantage):

Licenses must be purchased with Citrix Success Services, previously Subscription Advantage or Software Maintenance from a minimum of one year from delivery.

  • Software Maintenance (Customer Success Services) – Provides you with technical support from Citrix for the likes of XenApp, XenDesktop and Provisioning Services etc.
  • Subscription Advantage (Customer Success Services) – Entitles you to free upgrades whilst the Subscription Advantage license is still in date. This means if you have purchased XenApp 7.6 in August 2015 and 7.7 is released in December 2015, you are entitled to a free upgrade. If however 7.8 is released in December 2016 (yes I know it wasn’t) you won’t be eligible for a free upgrade as your Subscription Advantage contract will have expired in August 2016 if you did not renew.

See here for Subscription Advantage dates – http://support.citrix.com/article/CTX111618

User/Device License Overdraft and Concurrent Grace Period:

Under User/Device licensing models you will be temporarily granted additional licenses (called overdraft licenses) should you experience unexpected growth or usage spikes (10% allowance). This gives you time to make additional license purchases without compromising service. Concurrent licensing models does not have this benefit. Overdraft usage is reported in Studio. If you have 100 User/Device licenses, you would be granted to an additional 10 if your site enters overdraft.

The Concurrent licensing model comes with a 15-day grace period for license count exceeding users. After the 15 days are up any user connecting that exceeds the license count will be denied access.

Multiple License Editions and License Models under one Citrix Site:

A Citrix site can only support one licensing edition and licensing model if using FMA versions prior to XenApp and XenDesktop 7.14. If using XenApp and XenDesktop 7.14+ you have the option of using license types per Delivery Group. That means DeliveryGroup1 could run Concurrent and DeliveryGroup2 could run User/Device. Another example is DeliveryGroup1 running XenApp Platinum Concurrent and DeliveryGroup2 running XenDesktop Platinum User/Device.

You cannot have DeliveryGroup1 running XenDesktop Enterprise and DeliveryGroup2 running XenDesktop Platinum. That requires a separate Citrix Site. Delivery Groups that are not configured for licensing use the site license. If a site is licensed for XenDesktop Platinum for example, all Delivery Groups must run Platinum level licensing, but that can be XenApp or Concurrent/User/Device mixtures etc.

Key features and their supported license types needed to run:

  • Provisioning Services:
    • XenDesktop VDI, Enterprise and Platinum.
    • XenApp Platinum or Enterprise (applications on desktop OS only).
  • Skype for Business Optimization Pack:
    • XenDesktop or XenApp Enterprise or Platinum
  • Citrix App Layering:
    • XenDesktop all editions.
    • XenApp all editions apart from Secure Browser edition.
  • Citrix App Layering with App Portability and User Layers:
    • XenApp and XenDesktop Platinum.
  • Remote PC Access:
    • XenDesktop Enterprise or Platinum.
  • XenServer:
    • All editions of XenApp and XenDesktop. All features of XenServer 7.1 Enterprise are available with any version of XenApp or XenDesktop. Previously only XenApp and XenDesktop Platinum versions unlocked certain features.
      • Note: XenServer comes with rights to deploy supporting infrastructure services such as Active Directory and SQL, as long as these services are purposely serving the Citrix infrastructure solely and they are deployed on the same resource pools as your Citrix environment.
  • Workspace Environment Management:
    • XenDesktop Enterprise and Platinum customers with active Customer Success Services (previously Software Maintenance).
  • SCOM monitoring:
    • XenDesktop or XenApp Platinum with active Customer Success Services (previously Software Maintenance).
  • Citrix Director in XenApp/XenDesktop 7.12 for Enterprise customers can store up to 31 days of historical analytic data. Previously all versions apart from Platinum stored up to 7 days of trend data for XenDesktop or XenApp. Platinum previously and currently can store up to a years worth of historical data and includes the ability to integrate NetScaler HDX Insight in to the Directoy console for easy viewing. Some features in Director are only available with Platinum licenses, such as custom reporting.
  • Linux Hosted Shared:
    • XenApp and XenDesktop Enterprise or Platinum.
  • Linux Hosted VDI Desktops:
    • XenDesktop Enterprise or Platinum.

Note: If your license server goes offline you enter a 30 day grace period, production is not affected during this time.

For comparisions on XenApp/XenDesktop editions, refer to the feature matrix at https://www.citrix.com/go/products/xendesktop/feature-matrix.html

Microsoft licensing requirements: (Subject to change)

  • RDS CALs when using Session Hosts running Windows Server. Only User or Device models are currently offered.
  • Virtual Enterprise Centralized Desktop (VECD) or Windows Virtual Desktop Access (VDA) licenses when hosting or streaming desktop OS. VDA is available through Volume Licensing.
  • VDI Suite when using Hyper-V hosting VM desktops.

NetScaler:

NetScaler comes in a:

  • physical appliance (MPX).
  • physical with virtual appliances running on XenServer (SDX).
  • virtual (VPX).
  • CPX (containerised).

Customer Success Services must be purchased with every new VPX product licenses for one year from the delivery.

Appliance Maintenance must be purchased for physical appliances.

NetScaler VPX/MPX has three license editions:

  • Platinum.
  • Enterprise.
  • Standard.
  • NetScaler Gateway.

NetScaler Gateway has three license editions – Standard, Advanced, Enterprise.

For comparisions on NetScaler editions, refer to the feature matrix at https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/netscaler-data-sheet.pdf

Universal Licenses are also required for things such as SmartAccess, EPA Scans and Clientless Access. 5 Universal Licenses come with NetScaler Gateway, Standard and Enterprise edition. 100 CCU Universal licenses come with NetScaler Platinum edition.

Note: NetScaler firmware version 11.1 build 49.x and above come with 500 CCU Universal Licenses on Standard NetScaler edition, 1000 for Enterprise and Unlimited for Platinum.

Platinum XenApp & XenDesktop customers get a CCU license for every Platinum XenApp/XenDesktop license they have.


24 Comments

  • Erric Zdzchowski

    March 23, 2017

    Just a minor correction, the 11.1 license change makes 500 CCU Universal Licenses available on Netscaler Standard.

    https://docs.citrix.com/en-us/netscaler-gateway/11-1/faq.html

    Reply
    • George Spiers

      March 23, 2017

      Thanks

      Reply
  • RICHARD HUGHES-CHEN

    August 23, 2017

    Excellent explanation of Citrix licensing thanks. We have 550 XenApp CCU licenses and may we propose the trade up deal to convert all to XenDesktop but not too sure if CCU or User/Device would be best as will need to maintain a portion to XenApp.

    Reply
    • George Spiers

      August 23, 2017

      It depends on your business model. The fact that the User/Device model consumes licenses for 90 days makes Concurrent beneficial for a lot of organisations. You could have an organisation with 1000 users connecting to Citrix resources over the space of 90 days but only 200 ever concurrent at one time. Also keep in mind that with XenApp/XenDesktop 7.14+ you can now have multiple different license models within the same Citrix site. So you could have XenApp Enterprise User/Device against DeliveryGroup1 and XenApp Enterprise CCU against DeliveryGroup2. Previously, you had to create separate sites.

      Reply
      • RICHARD HUGHES-CHEN

        August 23, 2017

        Thanks and will put that in to the mix. The solution design is ever changing and now we have engaged with a supplier to review and help deliver the platform.. How ever that looks.

        Reply
  • Michael Wenger

    September 20, 2017

    Hi George, just one note. When reading https://www.citrix.com/products/xenapp-xendesktop/feature-matrix.html, it’s stated that PVS is not included with XenApp Enterprise, just for VMHosted apps running on a client OS…

    Reply
    • George Spiers

      September 20, 2017

      Hi Michael, yes that is right. I’ve updated the post.

      Reply
  • Manoj

    December 10, 2017

    Thanks for the article. I have XenDesktop concurrent licenses. I have users accessing published server OS desktop and also use published applications which is on a different server. How many license this user will consume, I am assuming 2?

    Reply
    • George Spiers

      December 12, 2017

      It will only consume one license per user.

      Reply
  • Pingback: Determine Licensing for your environment - Citrix Technology Explained

  • Prasad

    November 20, 2018

    Can Citrix Zenapp with 10 concurrent users be given to 50 host names.Or it’s given only on Device

    Reply
    • George Spiers

      November 20, 2018

      10 concurrent users can be licensed using the concurrent model, or else 50 unique devices only if used by multiple Citrix users, otherwise, unique users are licensed.

      Reply
      • Prasad

        November 20, 2018

        Can concurrent licenses are given in host / serial or both? Suppose I have 10 licenses of 5 concurrent users then can I give it on 20 hosts?

        Reply
        • George Spiers

          November 20, 2018

          Concurrent licenses are assigned to users logging on at one time, across any number of VDAs in your Citrix site.

          So you could have 5 concurrent licenses assigned to users who are logged on to 20 different VDAs between them.

          Reply
  • Richard Hughes-Chen

    November 22, 2018

    Can NetScaler VPX licenses be reused on
    new VPX appliances during a migration from one environment to another? Does Citrix render either not supported during this phase?

    Reply
    • George Spiers

      November 22, 2018

      You could just run the new appliance off a 90 day trial until you are ready to replace new with old. However technically a reuse should work.

      Reply
  • Jeroen

    April 10, 2019

    To use a Secure Browser setup
    Why do i need a Secure Browser license? i can make the same setup with a Platinum license…
    this wil work als if i publish a web browser? this one is confusing

    Reply
    • George Spiers

      April 11, 2019

      There did used to be a XenApp Secure Browser edition which I think was for organisations that did not have or need anything else. I’m not sure that edition actually exists any more, but with Premium (Platinum) licensing you would be good.

      Reply
  • Jay

    December 5, 2019

    Does a single user using multiple site from different regions using same product XenApp 7.15 require multiple licenses

    Reply
    • George Spiers

      December 14, 2019

      Yes if different Virtual Apps Sites.

      Reply
  • Anonymous

    February 20, 2020

    I have a situation that I need some clarification on. I have an old environment (6.5) and am setting up a new 1912 LTSR environment. The client had XD U/D licenses installed and was running just a XA farm. I am assuming that their previous var had traded up from XA to XD licenses and gave them a deal. When I start an app on the old farm you can see that it consumes a CCU from the XenApp tab. When I setup the new license server with the reallocated licenses it shows a U/D license consumed when I start an app so it is clearly not working like the old system did. The license files are also different even though the last one the client bought was in Oct 2019 and I downloaded again for the new LS on 12/31/2019 and this article confirms that Citrix did some changes https://support.citrix.com/article/CTX268709. I am wondering if I have to set the DG to a CCU in order to take advantage of the XA entitlementunder XD. I compared the two license files they are very different. Thoughts?

    Reply
    • George Spiers

      May 10, 2020

      Is the license file not being read correctly by your license server, from Studio? If not, suggest you call Citrix.

      Reply
  • Anonymous

    February 21, 2020

    Citrix changed the license model on 12/19/2019 so that you no longer get the XA CCU entitlement if you purchased XD U/D originally. They changed it to XA U/D so whoever was using XA as a Concurrent entitlement may now run out of licenses and may have to purchase more as detailed here https://support.citrix.com/article/CTX268709. Even though it does not say it directly that is what will happen, I verified this with Citrix Licensing.

    Reply
    • Richard Hughes-Chen

      February 22, 2020

      I had this issue with Provisioning Services licensing going missing in the new license file. Citrix failed to notify anyone of this change beforehand but what needs to happen now is simply restart the Soap Service on the Provisioning Servers.

      Reply

Leave a Reply to RICHARD HUGHES-CHEN Cancel reply