https://worldofeuc.com logo
Join Slack
Powered by
This message was deleted.
# citrix-vad
s
This message was deleted.
j
Have you tried method 2 here? https://support.citrix.com/article/CTX224551
m
yeah, you can’t do it because it complains about the cert
“Set-Item : Cannot connect to the VCenter server due to a certificate error. Make sure that the appropriate certificates are installed on the VCenter server, and install the appropriate certificates on all machines that contain instances of the Host service.”
not sure how you can update the thumbprint if the command to update relies on the SSL cert
j
That's what i've used in the past when i've encountered this. I did the imports and then ran those commands.
m
aaaand citrix support just hung up on me 😞
doh 1
s
I've had to do the thumbprint method before
also remove any older certs from the trusted people store If i recall
m
there was nothing in there at all before and it worked
The documentation says put the cert in trusted people but if IE doesn’t accept it why would any other part of the OS?
the other docs say follow the MS guide, which links to an article for 2008 that says put it in trusted root
so which is it?
2 hours and counting now and Citrix support still can’t tell me if it should be trusted root or trusted people, or why the powershell command won’t work if it doesn’t already trust the cert
nobody seems to have any idea how this should actually work, which cert to use, or where to put it
I found the database entry for it and manually updated it but it still doesn’t work
So I had to upgrade the entire site before it would prompt me to accept the new thumbprint in studio. Turns out it’s not the root cert that it wants, it’s first cert in the chain.
which is ass backwards to what Citrix support was telling me
I’ll do a write up on this tomorrow because there is an awful lot of bullshit out there in the citrix docs surrounding this
e
IIRC a customer of mine had the same issue and replaced the thumbprint in the SQL DB. There’s a KB on it.
Which would be PITA if it was Citrix Cloud!
m
The KB still doesn’t tell you it’s the host cert thumbprint you need, not the root cert.
It would also help if people realized the host cert is actually the first cert in the chain and the root is the last, not the other way around.
The number of articles telling you to install the last cert…
4 Views
Open in Slack
PreviousNext
Powered by