1Y0-201 · Question #138
Scenario: A company implements XenDesktop. Windows XP users are unable to launch their Windows 8 virtual desktops. They receive the following error: Error: Please contact your help desk with the…
The correct answer is D. Citrix Receiver is unable to verify the server certificate revocation. The 'Cannot validate SSL certificate' error on Windows XP is most commonly caused by Citrix Receiver being unable to complete certificate revocation checking (CRL or OCSP) against the issuing CA.
Question
Scenario: A company implements XenDesktop. Windows XP users are unable to launch their Windows 8 virtual desktops. They receive the following error:
Error: Please contact your help desk with the following information:
Cannot validate SSL certificate. What is a possible cause of this error?
Options
- ACitrix Receiver needs to be updated.
- BThe SSL certificate on the NetScaler has expired.
- CThe server certificate is NOT installed on the computer.
- DCitrix Receiver is unable to verify the server certificate revocation.
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- C14% (3)
- D71% (15)
Why each option
The 'Cannot validate SSL certificate' error on Windows XP is most commonly caused by Citrix Receiver being unable to complete certificate revocation checking (CRL or OCSP) against the issuing CA.
While updating Receiver may resolve some compatibility issues, the specific error references SSL certificate validation failure, which points to a revocation-checking problem rather than a general Receiver version incompatibility.
An expired SSL certificate on the NetScaler would produce an error stating the certificate has expired, not a generic 'cannot validate' message related to certificate trust.
If the server certificate itself were missing from the NetScaler, the SSL handshake would fail entirely before any validation error could be presented to the client.
Windows XP and older versions of Citrix Receiver have limited or broken support for Online Certificate Status Protocol (OCSP) and Certificate Revocation List (CRL) validation, causing Receiver to fail when it cannot confirm the certificate has not been revoked, which produces exactly this error message.
Concept tested: SSL certificate revocation validation in Citrix Receiver
Source: https://support.citrix.com/article/CTX101990
Topics
Community Discussion
No community discussion yet for this question.