web certificate - 403 forbidden error

Do you mean Web Interface is installed on the Metaframe XP server as well?  It sounds like a permissions issue though.  

The web interface is installed on the metaframe xp server.  Domain users have read\execute on c:\inetpub\wwwroot.  I tried giving them modify.  That didn't help.

Can you access this site internally?  Are you able to access Citrix with an administrator account?

I get the same error when trying to get to the site from the server.  I found some things about the ssl relay.  I've set that to port 442.  According to what I found, when using the Citrix Relay, in IIS the ssl port should be set to 444.  But when I do that, I can't get ot the web site at all.  BTW - I have opened ports 442, 443, 444 on the firewall.  And thanks for all your help.

Are you forcing SSL on the site?

yes

What is your default document for the site set as (default.asp, default.aspx)?  Is this WI 3 or WI4?

https://<server name>/Citrix/MetaFrameXP/default/login.asp?ClientDetection=On  is where the Citrix site is taking me.  What is WI 3 and/or WI 4?

Web Interface 3 or Web Interface 4.  When you open the IIS Manager and select properties of default web site, what are your settings on the default page, and what are your settings when you select the documents tab?

Chris

I believe WI 3 is for Persentation Server 3 and WI 4 comes with Presentation Server 4.  I'm running Metaframe XP Feature Release 2.  The default document in the default web site is default.htm.  There are no other web sites on this citrix server.  Thanks for everything!!

You can still install WI3 or 4, even if you have XP, PS3, or PS4 (it just wouldn't be recommended to use Web Interface 2 with Presentation Server 4, as you would lose out on functionality -- it'll work fine the other way, with Web Interface 4 running for Metaframe XP).  I was just wondering which version you have, because each of the versions has a different default starting page file (NFuse 2.1 has default.asp, WI3 has default.aspx).   If default.htm is listed as the default, that may be your problem.  

This might be the answer:  http://support.citrix.com/article/CTX198365&parentCategoryID=299   <--  Error: You do not have permission to view this page. (or) You are not authorized to view this page. HTTP error 403 &#65533; Forbidden

Hope this helps,
Chris

I set the default doc to default.asp and that didn't make any difference.  Interesting side note - I stopped the ssl relay and stopped requiring secure channel in IIS.  Now when I go to the web site, I can log in but when I try to open either of the two published apps, it just downloads an ICA file.  I'm sure there is something very basic I missed.  I thanks for your help.