[SOLVED] SSL Error 61: You have not chosen to trust "Entrust Root Certification Authority - G2", the issuer of the server's security certificate

[Tomas Jedno]

Hi there,

 

I have a problem with the connection via Citrix. I'm trying to connect to the our application, but I'm getting this error:

 

When I'm looking for the cert in certmgr, I found it in Trusted Root Certification Authority -> Cetrificates

 

The Citrix Workspace version is 21.02.0.25 (2102) and Windows 10 build 19042.789. I was trying to uninstall Citrix and perform a new installation. I also tried the LTS version of Citrix Workspace. I also tried downloading the certificate from www.entrust.com and importing it. If I download Citrix to a private PC, the application works fine. Any idea how to fix this issue?

[Sam Jacobs]

The certificate above is not a server certificate. It is a root CA certificate.

You need to create a CSR for your site and  submit it to Entrust (or whichever CA you choose).

After verification, they will send you the server certificate.

[Martin Meier]

Check if your AntiVirus Solution trusts the certificate or in any way intercepts the traffic.

There are some options (e.g. "Scan encrypted connections") which can prevent successfull connections.

[Tomas Jedno]

@Martin: The problem is on my home network, at work and when connected via LTE modem. I tried to turn off the antivirus and firewall, but the problem keeps recurring.

 

@Sam: Could you please be more specific? Because the same version of the system, the same Citrix application, the same way of connecting, but on two devices different result (on one work, on the other not). Citrix on Android also works without problems

[Manoj Rana]

Hi Tomas,

 

Can you confirm Root and Intermediate Certificates installed on the client device where you are seeing the issue ?

 

Thanks

Manoj

 

[Tomas Jedno]

Hi Manoj,

 

What specific certificate do you mean?

[Manoj Rana]

I believe you are using entrust one.

 

Thanks 

Manoj

 

[Sam Jacobs]

Tomas,

 

Do you have the certificate above in the Trusted Root Certification Authority Store of the device you are having the issue with?

[Tomas Jedno]

@Sam: Yes, I have an Etrust Root Cert. Aut. - G2 in my Trusted Root Cert. Aut.

[Sam Jacobs]

I would suggest that you go to digicert.com/help and enter your FQDN to check your certificate chain.

[Manoj Rana]

I agree with @sam 

 

Also please update the root cert in case 

md C:\temp\certs

# download latest SST from Microsoft
CertUtil –generateSSTFromWU C:\temp\certs\RootStore.sst

# Import RootStore.sst to Trusted Root CA Store
$file=Get-ChildItem -Path C:\temp\certs\Rootstore.sst
$file | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root\

 

Thanks

Manoj

 

[Tomas Jedno]

The problem was solved. I uninstalled Citrix Workspace again, deleted Temp, deleted everything in the registry that had something to do with Citrix. Then I reinstalled the Workspace App and now everything works. Thank you for your time.

[Pavan Kumar Kaithepalli]

Hi there ,

 

We are also facing the same error. we tried by uninstalling workspace.

but after reinstalling the workspace also i am getting same error .

 

 

 

Please respond