Citrix Error: The server certificate is out of date. Connection dropped

You may receive an error "The server certificate is out of date.  Connection dropped."  If you login into your Web Interface server and check that the server certificate is still valid then you will notice that the clock on the computer (client) is set incorrectly.  When the computer first connects to the Xenapp server there are checks to make sure that the security encryption certificates are current by comparing their expiration date to system time on the computer.   This can happen if the date is set in the past or into the future.

To fix this issue, double click on the system time in the taskbar on the bottom right of your screen, click on the "change date and time settings"  then change the date and time to current date and time.

You can now try to connect again.  If it still does not connect, you may need to reboot your computer before making the connection to Xenapp server.

Xen App server - MMC failed to create empty document

When trying to launch any application that uses MMC, an error appeared Microsoft Management Console - failed to create empty document.

Solution:

I checked the knowledgebase article on Microsoft website that talks about checking for the Temp folder location and disk space on the hard-drive. My setttings appeared to be fine, the Temp location was at c:\documents and settings\%username%\local settings\temp

It seemed that the profile for the user logging in was corrupt, I was able to resolve the issue by deleting the user's roaming profile.

SSL Certificate Expiration error on Web Interface Server after renewing

Yesterday I renewed our SSL Certificate on Citrix Web Interface Server. I went through the drill of creating the CSR and then sending it to Entrust. After renewing the certificate in IIS, the user's were still getting the error that the Certificate was expired.

We have Citrix Secure Gateway installed on the WI server, turns out after you renew the certificate in the IIS, you have to run the CSG configuration wizard to replace the current certificate. When you run the CSG wizard there will be a step where you will be shown your old certificate and your new one, you just pick the new one and complete the wizard and that should take care of the above issue.

Renewing Certificate on Web Interface Site with CSG

I am running Citrix Secure Gateway on my Web Interface Server. When my SSL certificate expired on the site I renewed with the CA. After I installed the new certificate on IIS, I started having couple of issues.
First, the default site would not start. It was in a Stopped state and when i tried to start it, I receved the error:

" The process cannot access the file because it is being used"

This was because the default site had it's SSL port set to 443, and if you have CSG installed, by default it will use Port 443 for SSL, so change the SSL port in the Default site to 444. This resolved the issue for me and the default started with no error message.