Certificate Services - New certificate

[cookie_monster]

Hi all, I have a problem that our certificate for Citrix secure gateway SSL cert will expire on the 30th and they ISP have sent a new one. They're changing their root CA as well so you need to import two other certs. These other two are supposed to be included in the MS root certificates update program but don't seem to be.

 

If I install our site certificate, the new intermediate certificate (ipsCA Level 1 CA ) and the new root CA certificate (ipsCA Global CA Root) it works and shows a path, if I don't the I get a certificate error. I've posted the link to the info below can anyone suggest where I'm going wrong OR will I have to get everyone to install these two new certificates on their home PC's so they can access Citrix?

 

http://certs.ipsca.com/Support/hierarchy-ipsca.asp

 

Cheers.

Edited December 22, 2009 by cookie_monster

[altecsole]

I had the same problem with our ipsCA certificate for our mail server. I've raised a support ticket with them, but not heard anything yet.

[cookie_monster]

I had the same problem with our ipsCA certificate for our mail server. I've raised a support ticket with them, but not heard anything yet.

 

 

I think i'm getting somewhere. I managed to get our IIS server to hand out the intermediate certificate but I needed to install the november root certificate from MS (on clients) to get IE to recognise the new root CA. It seems to work now but i'll have to get all users to install this update or add the cert direct from the ISP http://certs.ipsca.com/store/ipsCAGlobal.crt.

 

The part in bold near the bottom is for ISA but explains the process.

 

Note for ISA users: If you are using ISA 2004 or 2006 and your server is not sending the intermediate certificate, you need to fully reboot your server. We have confirmed this to be true with many customers: ISA server will not properly send the intermedate certificate chain until after a full reboot.

 

http://certs.ipsca.com/Support/CSRMicrosoft-Internet-Information-Server-5.0.asp

Edited December 22, 2009 by cookie_monster