Some users might receive an error prompt when launching an application with Citrix Receiver or Citrix Workspace on macOS with version 13.2. The error message shows “You have not chosen to trust XXXX the issuer of the server’s security certificate” like the one shown below. However, such issue can be resolved without escalated to your network team or security team.
To resolve this issue for launching an application from NetScaler Gateway website on macOS via Citrix Receiver or Citrix Workspace you may follow below steps:
1.Access the NetScaler Gateway website via Google Chrome browser instead of Safari. Then click the lock icon on the address bar > click “Connection is secure”.
2.Click “Certificate is valid” from last step to view those certificates.
3.Once those certificates show up > select the relevant root certificate > click “Export”.
4.Locate the exported certificate within Finder (usually in Download folder if you have not changed to other folder).
5.Double-click the certificate > select “System” under the Keychain option > Add.
6.When you saw a prompt for asking password or Touch ID > verify with either one method.
7.Once the certificate added > retry to access NetScaler Gateway website > login with your credentials > launching the application.
The root cause for this issue is due to Citrix Receiver with newer version going to validate the root certificates even if it trusts the intermediate especially for macOS and Linux.
Above solution has been tested on macOS 13.2 with Citrix Workspace version 23.01.53 (2301).