Our company doesn’t have many mobile users (people with laptops), and due to the sensitive nature of the business we’re in, and in an effort to mitigate the potential for data leakage, we’re gradually making the switch to using Citrix technology.
Once we’re logged into our Citrix gateway, we can launch a published application such as Remote Desktop Connection to then RDP into our workstations at the office.
While the process for connecting to Citrix is straightforward for both Windows and Mac clients, there are some additional steps that Mac users must take in order to successfully connect to the company network.
While the process is relatively straightforward and is simply a matter of installing the ICA client, authenticating to the access gateway, and running RDP, Mac users will have to first manually import the CA root certificate from where the server’s SSL certificate originated into the ICA client. Otherwise, you’ll get an Error 183 from the ICA Client indicating that:
SSL Error 0: You have chosen not to trust “”, the issuer of the server’s security certificate.
Error Number: 183
Here are some general steps that need to taken in order for the connection to be successful:
1. When accessing the access gateway, an warning appears stating that the certificate cannot be trust. Go ahead and trust (accept) the security certificate.
2. Open Keychain Access, and double-click the certificate of the access gateway to inspect it.
3. Scroll towards the bottom and look for a hyperlink to the CA’s certificate with a .crt extension.
4. The certificate will then be your downloads folder.
5. Make sure the certificate has a .crt extension. If not, change it to this extension.
6. Go to the Applications folder and find the folder for the Citrix ICA Client.
7. Inside this folder, create another folder called “keystore”.
8. Inside the keystore folder, make another one called “cacerts”
9. Move the certificate file that was downloaded into the “cacerts” subdirectory.
10. Close your browser, restart it, log-in to the access gateway and attempt to access one of the published applications.
11. The ICA client will start and should present the chosen application without any errors.
Let me know how your Citrix experiences on the Mac are. I admit, it’s kind of weird to see a Windows-type window overlayed on top of OS X.
