Scenario: While attempting to access web server that is load balanced by a Citrix ADC using HTTPS, a user receives the message below:
SSL/TLS error: You have not chosen to trust `Certificate Authority` the issuer of the server's security certificate.
What can a Citrix Administrator do to prevent users from viewing this message?
To prevent users from seeing the SSL/TLS error regarding not trusting the Certificate Authority, the Citrix Administrator needs to ensure that the server certificate is properly linked to its respective intermediate and root certificates. This establishes a complete chain of trust from the server certificate up to a trusted root certificate. If this chain is broken or incomplete, users will encounter trust errors when trying to access the server.
https://support.citrix.com/article/CTX101990 claims the answer is C root and int Certs
I'll go with D because, according to this page: This error message suggests that the CLIENT DEVICE does not have the required root certificate/intermediate certificate to establish trust with the certificate authority who issued the NetScaler Gateway server certificate.
C. This happens to me very often while giving support. No user should have to install or trust root certs for a SSL application if certificate links are correctly done on the vserver.
I would choose D. I saw several articles about error SSL61, and it"s a problem with the client software that cannot handle SHA-2. So you should upgrade the client software or certificates
C - The Cert Chains is not valid
Answers is C you dont need to install server Cert only Root Cert
i agree with solo ttps://support.citrix.com/article/CTX101990 This error message suggests that the client device does not have the required root certificate/intermediate certificate to establish trust with the certificate authority who issued the NetScaler Gateway server certificate.
C D makes no sense Why do you wanna install the server cert? Just need the Root or intermed. who signed the server cert.