Many people have encountered SSL Error 61 when trying to connect with the Citrix server. In truth, this error is very common to computers and can occur on Mac, Vista, Linux, and even Windows 7. This error message basically appears when there is a problem with the certificate especially when the user launches the published application through a secure gateway using the MetaFrame Presentation Server from Java. When the client directory does not contain the root certificate to trust the server certificate, the computer automatically prompts the message.
SSL Error 61 also appears when using private or public certificates. However, there is actually nothing too much to worry about this error as this can simply be fixed. For every OS, the solution can vary, however; the solution may simply revolve around fixing the certificate issue.
Possible cause of SSL Error 61
SSL Error 61 basically prompts followed by a message that shows the reason of the error. The following are some other possible causes of SSL Error 61:
• The required CA root certificate is not yet installed on the client device. This is very important especially when you use your own certificate to generate another certificate. This however, excludes well known certification such as Verisign, Baltimore, Thawte, or RSA.
• Inability to connect via SSL especially when the server certificate was issued by an intermediate certification authority
• Some problems or issues upon upgrading to ICA client 7.0
• When DNS is not properly configured between the client machine and the FQDN found in the Citrix Secure Gateway Server
• Connection is rejected when the server certificate is not valid or has already expired
• The Citrix port number might have been changed to other number
Possible Resolution for SSL Error 61
There is mane possible resolution for SSL Error 61. In this case, when one chosen resolution does not work, you can actually opt to another until the problem is resolved. The following are the general solution for ESSL Error 61.
• When error message in indicates that server certificate is not trusted, determine the required root certificate by downloading the SSL root certificate or by downgrading to the old ICA client.
• When you are using your own certificate to generate another certificate, install the CA root certificate on all the client devices in order to connect.
• If issue is related to the valid date or expiry, simply adjust the client time in order to reflect the current time.
• When the issue is about the DNS resolution, make sure to configure the DNS between the client computer and the FQDN of the Citrix Secure Gateway Server properly.
Avoiding SSL Error 61
Most times people cannot avoid SSL Error 61. Before we know what the problem is, we are already glaring on the error message, worried on how the issue can be resolved. But the truth is the error message is basically just an issue regarding security certificates.
If the computer system has not obtained the correct certificate or secured it correctly, SSL error 61 will most likely to occur. Most of us, do not know what it is until the error message show but it is best recommended to check whether or not your certificate is valid, precise, or if you have the root certificate before generating a new one. By this, we are unlikely to get SSL Error 61.