The XenMobile server is not sending the required intermediate certificate

The XenMobile server is not sending the required intermediate certificate

book

Article ID: CTX232299

calendar_today

Updated On:

Description

Whenever verifying the certificate for XenMobile on https://www.digicert.com/help/ you get the following:
User-added image
The server is not sending the required intermediate certificate.

Resolution

  1. You have to export a wildcard SSL listener from IIS or MMC console with the full chain as the intermediate certificate was missing from the chain on the XenMobile appliance.
    1. You need to import the PFX file that was uploaded to Xenmobile into IIS or an MMC console, make you mark as exportable the private key and include all extended properties
    2. Import the Root CA and missing Intermediate certificate
    3. Export the SSL certificate as a PFX file, make sure you mark the Private Key as exportable, check include all certificates in the certificate path if possible, check Export all extended properties
  2. Then you need to import that certificate into the XenMobile server and you have to reboot it.

Problem Cause

The SSL listener wildcard on the XenMobile did not have the full chain

Additional Information

https://support.citrix.com/article/CTX207965