nerdexam
Citrix

1Y0-201 · Question #138

Scenario: A company implements XenDesktop. Windows XP users are unable to launch their Windows 8 virtual desktops. They receive the following error: Error: Please contact your help desk with the…

The correct answer is D. Citrix Receiver is unable to verify the server certificate revocation. The 'Cannot validate SSL certificate' error on Windows XP is most commonly caused by Citrix Receiver being unable to complete certificate revocation checking (CRL or OCSP) against the issuing CA.

Troubleshooting

Question

Scenario: A company implements XenDesktop. Windows XP users are unable to launch their Windows 8 virtual desktops. They receive the following error:

Error: Please contact your help desk with the following information:

Cannot validate SSL certificate. What is a possible cause of this error?

Options

  • ACitrix Receiver needs to be updated.
  • BThe SSL certificate on the NetScaler has expired.
  • CThe server certificate is NOT installed on the computer.
  • DCitrix Receiver is unable to verify the server certificate revocation.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    10% (2)
  • C
    14% (3)
  • D
    71% (15)

Why each option

The 'Cannot validate SSL certificate' error on Windows XP is most commonly caused by Citrix Receiver being unable to complete certificate revocation checking (CRL or OCSP) against the issuing CA.

ACitrix Receiver needs to be updated.

While updating Receiver may resolve some compatibility issues, the specific error references SSL certificate validation failure, which points to a revocation-checking problem rather than a general Receiver version incompatibility.

BThe SSL certificate on the NetScaler has expired.

An expired SSL certificate on the NetScaler would produce an error stating the certificate has expired, not a generic 'cannot validate' message related to certificate trust.

CThe server certificate is NOT installed on the computer.

If the server certificate itself were missing from the NetScaler, the SSL handshake would fail entirely before any validation error could be presented to the client.

DCitrix Receiver is unable to verify the server certificate revocation.Correct

Windows XP and older versions of Citrix Receiver have limited or broken support for Online Certificate Status Protocol (OCSP) and Certificate Revocation List (CRL) validation, causing Receiver to fail when it cannot confirm the certificate has not been revoked, which produces exactly this error message.

Concept tested: SSL certificate revocation validation in Citrix Receiver

Source: https://support.citrix.com/article/CTX101990

Topics

#SSL certificate#certificate revocation#Citrix Receiver#connection error

Community Discussion

No community discussion yet for this question.

Full 1Y0-201 Practice