XenMobile Error :"Certificate not trusted -Cannot connect to company's network "

XenMobile Error :"Certificate not trusted -Cannot connect to company's network "

book

Article ID: CTX224193

calendar_today

Updated On:

Description

After putting XMS FQDN in the Secure Hub we get error "Certificate not trusted - We cannot connect securely to your company's network"

LOG ANALYSIS :
Below error message indicates that there is an issue with incorrect certificate uploaded under the NetScaler offload configuration.

",RECEIVER_UI,INFO (4),"UICoordinator showURLViewWithError: validateURLResponse(success, error) -> (0, Error Domain=com.citrix.me@work.storeoperations Code=0 "(null)" UserInfo={OriginalError=Error Domain=com.citrix.Receiver.AuthManager Code=11 "CAMAuthManErrorCodeHttpError" UserInfo={com.citrix.Receiver.AuthManager.HTTPDidPresentClientCert=false, NSLocalizedDescription=CAMAuthManErrorCodeHttpError, com.citrix.Receiver.AuthManager.HTTPClientCertCredID=null, com.citrix.Receiver.AuthManager.DiagnosticDescription=The operation couldn’t be completed. (NSURLErrorDomain error -1012.), NSUnderlyingError=0x160fea990 {Error Domain=NSURLErrorDomain Code=-1012 "(null)" UserInfo={NSErrorFailingURLKey=https://xms180.ctx.local/AGServices/discover, NSErrorFailingURLStringKey=https://xms180.ctx.local/AGServices/discover}}}, Store=<Store: 0x160fe3d30>})",Active,com.apple.main-thread,c07,Worx
 

Resolution

Bind the correct SSL certificate under the NetScaler XenMobile offload load balancing. The SSL Certificate is used for device to XenMobile server secure communication and if it has expired then device won’t be able to communicate.
a) Please follow below article to Generate SSL certificate from NetScaler. http://support.citrix.com/article/CTX109260
b) Please follow below article to upload New SSL Certificate under XenMobile Console. http://docs.citrix.com/en-us/xenmobile/10/xmob-certificates/xmob-server-certificates.html
c) Bind the new SSL certificate under SSL Offload and the NetScaler Gateway.
(Reference: XenMobile MDM SSL Offload Configuration: http://support.citrix.com/article/CTX200063)