The following Error occures when trying to use Citrix (access SAP Training via Citrix) on Ubuntu 15.10:

Citrix Receiver
SSL error
Contact your helpdesk with th following inofrmation:
You have not chosen to trust "Symantec Class 3 Secure Server CA / G4", the issuer of ther server's security certificate (SSL error 61).

Citrix SSL Error Message

I installed Citrix according the Tutorial How to install Citrix Receiver icaclient in Ubuntu 14.04 LTS 64-bit The installation completed without any errors.

I also made sure that the certificates are there according to the CitrixXenAppPlugin - configure certificates:

enter image description here

Additionally I checked in Firefox if the certificates are known and even checked all marks (which where not checked before) (Under Settings -> Advanced -> Certificates):

Firefox Certificate settings

What am I missing?


I'm using Ubuntu 16.04.1, Firefox 50 and Citrix Receiver 13.4.

@thorsten-niehues solution didn't work for me unfortunately.

To solve the problem, I had to copy the .crt file to /opt/Citrix/ICAClient/keystore/cacerts

I was then able to connect to Citrix with Firefox and with Chrome without any problem.


Not sure what scripts are run in your Citrix install, but I believe you may still need to tell Ubuntu to trust the root CA - you can do that by running sudo dpkg-reconfigure ca-certificates from the directory where you have the .crt files for Citrix. mozilla has its own directory (/usr/share/ca-certificates/mozilla) and that may be where it is looking to show the list of trusted certs that you see in Firefox.

  • Thanks for the Information. Unfortunately it did not solve the Issue. In /opt/Citrix/ICAClient/keystore/cacerts are symlinks to /usr/share/ca-certificates/mozilla so I tried the command in both directories with no success :( I also tried copy the certificate in both directories with no success. – Thorsten Niehues Mar 16 '16 at 9:19
  • 1
    @ThorstenNiehues - sorry - been a while since I've done this on Ubuntu -- have you tried update-ca-certificates? Good manpage description for that command. – sletarte Mar 17 '16 at 13:20

OK thx to the hints from @sletarte here the solution:

  1. Place certificate to be trusted in /usr/local/share/ca-certificates
  2. Execute sudo update-ca-certificates
    You should see something line this:
    1 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d.... Adding debian:SymantecClass3SecureServerCA-G4.pem
  3. Use Google Chrome instead of Firefox

protected by Community Oct 3 '17 at 18:28

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.