How do I fix an "Untrusted Certificate Error 61" or "Connection Failed Error 1110" when using Citrix Receiver?

Installing a new certificate

Determining with certificate you need to install

In the error message from Citirix, it will specify that you either do not trust:

  1. COMODO RSA Certification Authority

  2. InCommon RSA Server CA

If your error is regarding COMODO RSA Certification Authority:

  1. Go to Comodo’s website: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/969/108/root-comodo-rsa-certification-authority-sha-2

  2. Download the attachment “comodorsacertificationauthority.crt” at the bottom of the page

 

If your error is regarding either:

  1. InCommon RSA Server CA
  2. USERTrust RSA Certification Authority

  1. Go to Comodo’s InCommon website: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/991/0/incommonssl-sha-2

  2. Download the attachment “incommonrsaserverca-bundle.crt”

 

Installing the Certificate

Directions for Windows

  1. Double click on the certificate file you downloaded

  1. If prompted, click “Open”

 

  1. In the Certificate dialogue, click “Install Certificate”, the Certificate Import Wizard will pop up.

  1. Click “Next”

  1. Leave “Automatically select the certificate store…” selected and click “Next”

  1. On the next (final) page click “Finish”

  1. You should receive a pop-up reporting “The import was successful”.

 

How to install the certificate in OSX

  1. Click on the downloaded certificate file.

  1. The Keychain application will open and prompt you.

  1. Select login from the Keychain: drop down and click Add

    1. If prompted to authenticate, enter your username and password

  2. NOTE: You may need to also reinstall the Citrix Receiver client

    1. Download: http://downloadplugins.citrix.com/Mac/CitrixReceiverWeb.dmg

    2. Open the file and run Install Citrix Receiver

      1. If prompted, enter your credentials

 

   How to install a Certificate in Linux

 1. Copy the certificate you downloaded to: /opt/Citrix/ICAClient/keystore/cacerts
                  sudo mv ~/Downloads/incommonrsaserverca-bundle.crt /opt/Citrix/ICAClient/keystore/cacerts/
 2. Change the read attributes of the certificate
                  sudo chmod ugo+r /opt/Citrix/ICAClient/keystore/cacerts/incommonrsaserverca-bundle.crt
 3. Close your browser to force the Citrix client to close. When it re-opens it should re-read the keystore folder.