Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4059
  • Last Modified:

"SSL Erro 61 on Windows Vista Home Premium edition

Hi there,

At my company we have a Citrix Portal server running for our remote home workers. The server is running Windows Server 2003 SP1. The home workers have the Citrix ICA Client and a rootcertificate installed so that they are able to load our portal website.

Now we have a problem with one user. The user has Windows Vista Home Premium edition installed and also has installed the ica client together with the rootcertificate. He then goes to our portal site and then already he gets the message that the rootcertificate is not trusted but he has the option to still proceed to the site (and he does). After loading he's able to login normally and after that he sees the applications wich he can use, he starts one up and then gets the message that the ica client is not vista compatible but is allowed to still use it and also this goes good.

But after loading the ica client the following message appears:

"SSL Erro 61: You have not chosen to trust the issuer of the server's security certificate."

With only the option of clicking OK the user is back where he started with seeing the applications.

Does anybody know how to solve this problem? It's for sure a Vista problem or related to it since its working totally fine with home workers using Windows XP or 2000.

Thnx for the help,

RLengkeek
0
RLengkeek
Asked:
RLengkeek
  • 4
  • 4
1 Solution
 
chrisnewman01Commented:
Have you downloaded the latest ICA client (10.1) that works with Vista?  http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755
0
 
RLengkeekAuthor Commented:
Yep i already did that and that solved indeed the problem that the ica client was compatible now. But this still aint solving the problem i have with the root certificate wich is giving me the error like i said in my post.

In the meantime i also tried to load the root certificate (diginotar CA from www.diginotar.nl) in the certificate manager (certmgr.msc) into the trusted certifiates but this didnt solved it either.

Is it something with Internet Explorer 7 or is it something with Vista in general???
0
 
PowerITCommented:
The instructions for installing a root certificate are:
- Download or otherwise obtain the SSL root certificate .crt/.cer file issued by your SSL certificate provider. You already did this.
- Double-click on it, and choose "Install Certificate" (button at the bottom of the certificate)
So this is normally not done throug certmgr.

J.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
RLengkeekAuthor Commented:
Hi J.

(just for the info, the other certificate question i have here is from my co-worker Lennaert and this is me the real RLengkeek haha)

But the both options u said in your post is what i already did but doesnt work either way. I used the certmgr since i read somewhere on Internet that was a possible way to do it but as i said that wasnt working either way....

So yup this really sucks and i have no clue what to do about it but since more home-workers go to Vista in the future i really need to find a solutions for this :-( so help!!! :-)
0
 
PowerITCommented:
I'm not a Citrix specialist, although I have used it in the past. But I do know a lot about PKI, SSL, certificates etc ...
I'll look further into it as soon as I have some spare time. Dito for the other question.

J.
0
 
RLengkeekAuthor Commented:
me neither and i checked also the forum of Citrix but not much help there either in terms of this problem. I'll also look further but already thnx for the help in both cases :-)

Ciao,

RL
0
 
PowerITCommented:
Have a look at the last remark here: http://www.dcug.de/cms/viewtopic.php?p=17701
Basically it is saying to surf to your citrix-site, download the root CA from there and import that one.

J.
0
 
RLengkeekAuthor Commented:
Hey J.

Well i installed the rootcertificate on the portal and citrix server (the homeworker go from the portal server to login to the citrixserver) and after that i tested the situation wich totally worked. A day later i was also able to test on two other laptops with different vista versions and also on those it worked.

So thanks for the help dude and have fun with the points ;-)
0
 
PowerITCommented:
Oooh, I love points, lol.
Glad to be able to help.

J.
0

Featured Post

New Tabletop Appliances Blow Competitors Away!

WatchGuard’s new T15, T35 and T55 tabletop UTMs provide the highest-performing security inspection in their class, allowing users at small offices, home offices and distributed enterprises to experience blazing-fast Internet speeds without sacrificing enterprise-grade security.

  • 4
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now