Citrix Workspace App is installed on a Windows 10 / Windows 11 computer without selecting the option "Start App Protection after installation"
![]()
As a result "App Protection service" is set to Manual and not running
![]()
When user tries to launch a desktop that is configured to be launch with App Protection, it fails with error "Unable to establish secure environment using App Protection"

User can start manually the "App Protection service" as a workaround to launch the desktop
When App Protection service is not running and user launches a protected desktop, the process UpdaterService.exe is responsible to set the "App Protection service" as Automatic and start the service, for the launch to succeed
![]()
UpdaterService.exe process is started when "Citrix Workspace Advanced Service" (CWAUpdaterService) is Running
![]()
If the "Citrix Workspace Advanced Service" is disable, it will not start the "App Protection service", and the protected desktop will fail to launch
![]()
Enable and set the "Citrix Workspace Advanced Service" as Automatic
![]()
Citrix Workspace App fails to launch desktops when App Protection is enabled after installing it without the option "Start App Protection after installation"