+ Post New Thread
Results 1 to 3 of 3
Windows Thread, Certificate Services - New certificate in Technical; Hi all, I have a problem that our certificate for Citrix secure gateway SSL cert will expire on the 30th ...
  1. #1
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74

    Certificate Services - New certificate

    Hi all, I have a problem that our certificate for Citrix secure gateway SSL cert will expire on the 30th and they ISP have sent a new one. They're changing their root CA as well so you need to import two other certs. These other two are supposed to be included in the MS root certificates update program but don't seem to be.

    If I install our site certificate, the new intermediate certificate (ipsCA Level 1 CA ) and the new root CA certificate (ipsCA Global CA Root) it works and shows a path, if I don't the I get a certificate error. I've posted the link to the info below can anyone suggest where I'm going wrong OR will I have to get everyone to install these two new certificates on their home PC's so they can access Citrix?

    http://certs.ipsca.com/Support/hierarchy-ipsca.asp

    Cheers.
    Last edited by cookie_monster; 22nd December 2009 at 12:21 PM.

  2. #2
    altecsole's Avatar
    Join Date
    Jun 2005
    Location
    Morecambe, Lancashire, UK.
    Posts
    281
    Thank Post
    39
    Thanked 36 Times in 26 Posts
    Rep Power
    25
    I had the same problem with our ipsCA certificate for our mail server. I've raised a support ticket with them, but not heard anything yet.

  3. #3
    cookie_monster's Avatar
    Join Date
    May 2007
    Location
    Derbyshire
    Posts
    4,196
    Thank Post
    392
    Thanked 278 Times in 239 Posts
    Rep Power
    74
    Quote Originally Posted by altecsole View Post
    I had the same problem with our ipsCA certificate for our mail server. I've raised a support ticket with them, but not heard anything yet.

    I think i'm getting somewhere. I managed to get our IIS server to hand out the intermediate certificate but I needed to install the november root certificate from MS (on clients) to get IE to recognise the new root CA. It seems to work now but i'll have to get all users to install this update or add the cert direct from the ISP http://certs.ipsca.com/store/ipsCAGlobal.crt.

    The part in bold near the bottom is for ISA but explains the process.

    Note for ISA users: If you are using ISA 2004 or 2006 and your server is not sending the intermediate certificate, you need to fully reboot your server. We have confirmed this to be true with many customers: ISA server will not properly send the intermedate certificate chain until after a full reboot.
    http://certs.ipsca.com/Support/CSRMi...Server-5.0.asp
    Last edited by cookie_monster; 22nd December 2009 at 02:50 PM.

SHARE:
+ Post New Thread

Similar Threads

  1. Certificate Generation
    By TechMonkey in forum MIS Systems
    Replies: 0
    Last Post: 23rd April 2009, 03:00 PM
  2. SSL Certificate
    By PRicho in forum How do you do....it?
    Replies: 39
    Last Post: 22nd January 2009, 12:46 PM
  3. How to remove a Certificate from CA
    By PRicho in forum Windows
    Replies: 2
    Last Post: 22nd July 2008, 11:29 AM
  4. Web certificate
    By edie209 in forum Web Development
    Replies: 15
    Last Post: 16th May 2008, 10:17 AM
  5. Certificate Authority
    By plexer in forum *nix
    Replies: 9
    Last Post: 15th October 2006, 12:57 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •