In this case, the gateway is normally configured with all the intermediate certificates (but not the root certificate) such as.

For information about the Citrix product lifecycle, and to find out when Citrix stops supporting specific versions of products, see the Citrix Product Lifecycle Matrix.

Then, you can successfully access Citrix resources using Citrix Workspace app for Mac.

When a user chooses to continue through the warning, a list of applications is displayed.

When clicking the attachment, you are asked to import the root certificate.

Citrix Workspace app for Mac supports wildcard certificates.

For information on this task, see Citrix Gateway documentation.

For more information about installing and linking an intermediate certificate with Primary CA on a Citrix Gateway appliance, refer How to Install and Link Intermediate Certificate with Primary CA on Citrix Gateway.

If the certificates are not all trusted, the connection fails.

Many web browsers include a large set of root certificates that they trust.

An incorrect set of certificates might cause Citrix Workspace app for Macs connection to fail.

This configuration is recommended for customers who require stricter validation, by determining exactly which root certificate is used by Citrix Workspace app for Mac.

Citrix Workspace app for Mac will also check that it already trusts Example Root Certificate.

If Citrix Workspace app for Mac does not trust Example Root Certificate, the connection fails.

If you require this stricter validation, make sure that your configuration uses the appropriate root certificate.

For example, there are currently two certificates (DigiCertGTE CyberTrust Global Root, and DigiCert Baltimore RootBaltimore CyberTrust Root) that can validate the same server certificates.

On other devices, only one is available (DigiCert Baltimore RootBaltimore CyberTrust Root).

If you configure GTE CyberTrust Global Root at the gateway, Citrix Workspace app for Mac connections on those user devices fail.

Consult the certificate authoritys documentation to determine which root certificate must be used.

Also note that root certificates eventually expire, as do all certificates.

This configuration, omitting the root certificate, is normally recommended.

If it finds one that validates correctly, and is also trusted (such as Example Root Certificate), the connection succeeds.

This configuration supplies the intermediate certificate that Citrix Workspace app for Mac needs, but also allows Citrix Workspace app for Mac to choose any valid, trusted, root certificate.

However, Citrix Workspace app for Mac does not ignore the wrong root certificate, and the connection fails.

Full Access For Citrix On A Mac