Citrix Receiver on Mac - SSL Error 61

Desktop online / Desktop Online Citrix XenApp / Citrix Receiver on Mac - SSL Error 61

When you access Desktop online on a Mac you might see an error message like below.
SSL Error 61 "You have not chosen to trust "DigiCert SHA2 High Assurance Server CA", the issuer of the server's security certificate.

 

Solutions:

This is a client side issue. The issue is related to a locally stored certificate chain file that is outdated. Normally you should get an updated certificate if you keep your Operation System up to date. If you manually installed the older certificate here are some tips to remove them:

OS X users can resolve the issue by deleting the certificate from their Login keystore using Keychain Access.

In Keychain Access go to View -> Show Expired Certs and search for ‘DigiCert High” to find the DigiCert High Assurance EV Root CA that expired on July 26, 2014. Delete this certificate and close Keychain Access.

FixKeychainAccess

After this you have to Add the "DigiCert SHA2 High Assurance Server CA.crt"(see attachments)  to the following Keystore: "SSL Error 61: You have not chosen to trust 'Certificate Authority'" on Receiver for Mac

Applications\Citrix ICA Client\keystore\cacerts

For instructions see https://support.citrix.com/article/CTX108800&se "SSL Error 61: You have not chosen to trust 'Certificate Authority'" on Receiver for Mac

 

 

 

 

Attachments