Search

ICA 10.1 Client Adds Support for Client Certificates

Wednesday, 03 October 2007 by Michel Roth

Earlier versions (than 10.1) of the ICA Client had a limitation in the fact that they didn't work properly with an Citrix Access Gateway that required SSL client certificates for client connections. As of version 10.1 this limitations no longer exists. The weird thing is that this bug fix / feature enhancement never made in into the documentation of the 10.1 ICA Client.

Earlier versions (than 10.1) of the ICA Client had a limitation in the fact that they didn't work properly with an Citrix Access Gateway that required SSL client certificates for client connections. As of version 10.1 this limitations no longer exists. The weird thing is that this bug fix / feature enhancement never made in into the documentation of the 10.1 ICA Client.

Jay Tomlin has all the details: "I'm happy to report that this limitation has been addressed with the release of the Win32 Presentation Server client version 10.1. Somehow this new feature managed to escape the readme.

Access Gateway (any edition) can be set to require a valid client certificate before allowing users to log on, and Access Gateway Enterprise Edition can go further and actually authenticate the user based on the certificate alone. When the option to require a client certificate is enabled, and Web Interface is configured to send Presentation Server clients through the gateway unassisted by a network-layer tunnel, the ICA client must perform its own SSL handshake with the gateway and pump the ICA traffic through that SSL tunnel."