This message was deleted.

anything change in the environment? Workspace versions? If those users are Mac users, it could be the chain on the Netscaler.

it's windows. Browser and CWA Logon have no issue to accept the cert but as soon as the ICA launch is triggert the error occurs. In order to fix it we have to delete the root cert from the computer store and import it again via user store.