-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 What version of the ICA client are you running? Also, export the CSG cert (WITHOUT THE PRIVATE KEY), then open the Properties of IE, click on the Content tab, then click on the Certificates button. From the new window, select the Trusted Root Certification Authorities, and import the certificate. If the client running SP1 works by doing this procedure, I would make sure that the client has the Updated Root Certificates you get from Windows Update. Also, what was the process you went through to get the CSG cert? Mainly the steps on the OS (not on Verisign's site). CHRIS LYNCH - MCSE, CCNA, CCA NETWORK ENGINEER - INFORMATION TECHNOLOGY NRT Incorporated, 27271 Las Ramblas, Mission Viejo, CA 92691 Chris.lynch@xxxxxxxxxx Tel 949.367.3406 - -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Rowlandson, John Sent: Thursday, September 26, 2002 5:19 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Advanced CSG 1.1 users - w2k sp1 only issues CSg 1.1 (w2k sp3), nfuse 1.7 (w2k sp3, sta 1.0 (w2k sp3, williamette 2.0, mfxp1.0 fr2 (w2k sp3 I think I have an issue where clients on W2k SP1 only will not work with CSG 1.1 Can anyone confirm or deny???????????? All my other clients so far work The only clients that don't work are w2k sp1 The error on the client is : "the server certificate received is not trusted (ssl error 61)."=20 If I update a broken client to w2k sp2 it fixes it If I update a broken client to the latest ie version (ie6sp1) it is still broken... We are using verisign certs., the w2k sp1 clint can view the https://home.mallesons.com page so the web server cert is working, the client just can't handle the csg server cert. Thanks John ********************************************** This weeks sponsor Kevsoft Corporation TScale by Kevsoft Corporation Support 30% to 40% more users on your server farm without buying new hardware! http://www.kevsoft.com/ *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm -----BEGIN PGP SIGNATURE----- Version: PGP 7.1 iQA/AwUBPZMhSvl56xfvzmMfEQIWKQCePVVP5G427hGVEDM0b4taCW2aP1AAoLno r+klH3+VrRlAPYoZGDVPpF1U =+T1H -----END PGP SIGNATURE----- ********************************************** This weeks sponsor Kevsoft Corporation TScale by Kevsoft Corporation Support 30% to 40% more users on your server farm without buying new hardware! http://www.kevsoft.com/ *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm