Fixing Citrix Errors
Follow the steps below to fix an "Untrusted Certificate Error 61" or "Connection Failed Error 1110" when using Citrix Receiver. Needing Citrix access? God to our helpdesk and submit a Citrix ticket.
Installing a new certificate
Determining which certificate you need to install
In the error message from Citrix, it will specify that you either do not trust:
COMODO RSA Certification Authority
InCommon RSA Server CA
If your error is regarding COMODO RSA Certification Authority:
Go to Comodo’s website: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/969/108/root-comodo-rsa-certification-authority-sha-2
Download the attachment “comodorsacertificationauthority.crt” at the bottom of the page
If your error is regarding either:
InCommon RSA Server CA
USERTrust RSA Certification Authority
Go to Comodo’s InCommon website: https://support.comodo.com/index.php?/Default/Knowledgebase/Article/View/991/0/incommonssl-sha-2
Download the attachment “incommonrsaserverca-bundle.crt”
Installing the Certificate
Directions for Windows
Double click on the certificate file you downloaded
2. If prompted, click “Open”
3. In the Certificate dialogue, click “Install Certificate”, the Certificate Import Wizard will pop up.
4. Click “Next”
5. Leave “Automatically select the certificate store…” selected and click “Next”
6. On the next (final) page click “Finish”
7. You should receive a pop-up reporting “The import was successful”.
How to install the certificate in OSX
Click on the downloaded certificate file.
2. The Keychain application will open and prompt you.
3. Select login from the Keychain: drop down and click Add
If prompted to authenticate, enter your username and password
4. NOTE: You may need to also reinstall the Citrix Receiver client
Download: http://downloadplugins.citrix.com/Mac/CitrixReceiverWeb.dmg
Open the file and run Install Citrix Receiver
If prompted, enter your credentials
How to install a Certificate in Linux
1. Copy the certificate you downloaded to: /opt/Citrix/ICAClient/keystore/cacerts
sudo mv ~/Downloads/incommonrsaserverca-bundle.crt /opt/Citrix/ICAClient/keystore/cacerts/
2. Change the read attributes of the certificate
sudo chmod ugo+r /opt/Citrix/ICAClient/keystore/cacerts/incommonrsaserverca-bundle.crt
3. Close your browser to force the Citrix client to close. When it re-opens it should re-read the keystore folder.