Question:
With Certificate Based Authentication configured as the only authentication method on the NetScaler Gateway, when attempting to reset the Citrix PIN in Secure Hub, the user is required to re-enroll the device.

Answer:

• With Certificate Based Authentication as the only authentication method enabled, it is the expected behavior to have to re-enroll the device with Secure Hub.
• With LDAP and Certificate Based Authentication enabled, it is possible to reset the PIN without needing to re-enroll the device.