LKBEN10673: You cannot connect to Citrix Presentation Server and get SSL Error 61


Symptom

SSL Error 61: You have chosen not to trust "Root SGC Authority", the issuer of the servers security certificate

Cause

The server certificate received is not trusted (SSL error 61)

Solution

Users will receive SSL Error 61 if the certificate chain does not meet the requirements set out above. Citrix Technical Support has encountered two particular certificate faults:

1. The Enhanced Key Usage field is present in an Identity certificate but the field does not contain “Server Authentication.”
2. An Intermediate certificate has been used to sign other certificates but does not contain the “Certificate Signing” key usage.

In other words, your certificate is not valid.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!

About the Author

Author: Wim Peeters - Keskon GmbH & Co. KG

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.