Posted by Dave Thijssen Monday, 25 March 2013
|Access is denied. Please contact your system administrator.|
After installing a new certificate on your Citrix NetScaler/Access Gateway the list of applications is not displayed. Instead the applications pane (left frame) that normally contains the application list displays an error: "Access is denied. Please contact your system administrator." But that, unfortunately in this case, is you.
Encrypted communication between the Access Gateway and the Citrix Web Interface cannot take place, because the latter does not hold the correct (renewed) certificate.
|"Certificates" MMC Snap-in|
In order for this to work you need to have the certificate in .pfx format. If necessary you can convert your certificate using OpenSSL. You can use the "Certificates" MMC Snap-in to import the certificate into the "Trusted Root Certificateion Authorities" store.
The certificate is issued to a host name or FQDN. The certificate is only valid if it can communicate with the Access Gateway using this host name. In some cases you might need to modify the hosts file on your Web Interface server to include the line:
accessgateway.mycompany.com <ip adres of CAG>
This is the same address that's specified in the Secure (Client) Access settings of your Access Platform / XenApp Web site.
|Edit Gateway Settings (Citrix MetaFrame Presentation Server 4.0)|
|Specify Gateway Settings (Citrix XenApp 6.5)|