Receiver for Mac

Receiver for Android

Solution

Important! This article is intended for use by System Administrators. If you are experiencing this issue and you are not a System Administrator, contact your organization’s Help Desk for assistance and refer them to this article.

This issue may be caused by an out-of-date intermediate certificate installed at NetScaler Gateway. This does not mean that the CA certificates currently being used is expired but the CA has since released newer versions of that certificate.

Verify the certificate bindings at the NetScaler Gateway to resolve this issue.

To confirm this, visit the NetScaler Gateway website using a web browser, and examine the certificate chain in the web browser. You may wish to cross-check this by repeating with more than one web browser (such as with Google Chrome and Mozilla Firefox). Then, compare all the certificates in the browser's certificate chain with the certificate chain at NetScaler Gateway.

Note: Compare all the serial numbers in the certificates and not just the Subject Name. If there are any mismatches in intermediate certificates, this is a possible cause.

For more information about installing and linking an intermediate certificate with Primary CA on a NetScaler Gateway appliance, refer to CTX114146.

Problem Cause

The Receiver for Windows 4.7, Receiver for Mac 12.5, Receiver for Linux 13.6 and newer versions are going to validate the root certificates even if it trusts the intermediate, which is not the case with the browsers. If the browser trusts the intermediate, it trusts the server certificate, without going down to the root certificate and will display the newer version of the root from its certificate store and not the actual root certificate sent by the server or NetScaler Gateway.
In Receiver for Android 3.12.2, joint server certificate validation is turned off by default. If this policy is enabled in the Receiver without the correct set of certificates configured on the server/gateway, users may see the error message.

Additional Resources

• CTX221453 - Citrix Receiver - SSL Error when connecting via NetScaler

• Citrix Documentation - Receiver for Mac, Receiver for Android

• CTX114146 - How to Install and Link Intermediate Certificate with Primary CA on NetScaler Gateway

Citrix Receiver allows for Citrix connections to be made from lots of different types of devices, including devices running Microsoft Windows OS, Android OS, Apple iOS and the various Linux OS families. Today I will be taking a quick look at installing Citrix Receiver on Mac OS X (10.13, aka High Sierra).

I could not find Citrix Receiver on the Apple App Store on my Mac, so I had to install it via a download from Citrix.

First load up your preferred web browser (I’ve tested with both Apple Safari and Google Chrome) and browse to https://www.citrix.co.uk/downloads/citrix-receiver/mac/

The current (as of May 9th 2018) download is Receiver version 12.9.1 and the download is dmg (disk mountable image) file that comes in at just under 50MB. Once downloaded and opened the dmg file should put a disk icon on your Mac desktop.

This contains a .pkg (package) file and a .app (application) file. The “Install Citrix Receiver” file does exactly as you would expect; it installs Citrix. Double click it to begin the installation. The “Uninstall Citrix Receiver” application uninstalls (removes) Citrix Receiver.

The installer warns that you are running an installation package; proceed only if you are the owner/admin of the device and want Citrix Receiver.

Once the installer has finished it will ask if you wish to keep the disk image and package or if you want to move it to the trash.

Personally I am a fan of keeping the original (source) installation files in case of issues later on (i.e. if I need to uninstall or reinstall a particular version of an application).

To “eject” (i.e. close) the disk image, right click it and choose Eject “Citrix Receiver”.

Now go back to your preferred web browser (again, I tested Apple Safari and Google Chrome) and navigate to your organisations Citrix portal web address.

Google Chrome gave me a warning about opening Citrix Receiver for the first time and asking if I wanted to associate a file (Citrix Receiver uses .ica files) with Citrix Receiver.

Again, only proceed with setting file associations, opening new applications or trusting a website to run a plug in if you are the owner/admin of the computer and trust the site!

Clicking “Open” and “Open Citrix Receiver Launcher” opened Citrix Receiver.

Apple Safari asked if I wanted to trust my organisation’s website to use the Citrix Receiver plug in.

Clicking “Trust” opened Citrix Receiver.

When Citrix Receiver has been installed on Mac OS X it places a Citrix Receiver icon in the system bar at the top of the screen:

This icon allows the user access to Receiver (if you want to access directly to a Citrix store front rather than via a web browser), Preferences (controlling what Citrix can access locally when in a Citrix session, clear the Citrix Receiver cache), the option to check for updates and an option to Quit (close) Receiver.

Download Citrix Certificate For Mac

Citrix Receiver Download For Mac

Citrix Workspace App Mac Download

EDIT (OCT 2018): Receiver is now Workspace app; see https://geektechstuff.com/2018/10/11/citrix-receiver-becomes-citrix-workspace-app-october-2018/