Exporting the Root CA
Since the Corporate PKI distributes the Root CA certificate via group policy the certificate is most probably on any domain joined machine.
- Start the MMC
- Add the Certificates Sap-In
- Expand Trusted Root Certification Authorities
- Select Certificates
- Locate and select the Corporate Root CA certificate
- Right Click - All Tasks Export
- Accept the default
- Save the file
Import the Root CA Certificate
This file now need to be transferred to the iOS device.
I simply mailed it to myself
Opening the file will trigger the Certificate installation process
Select Install now
Enter your passcode (the same one you use to unlock your phone)
The certificate will be added and the cert will now be trusted
To see what other Certificates or Profiles have been installed on the device
- Select Settings
After the cert had been installed I retried my Citrix connection and this time it succeeded without a problem.
The original error was:
You have not chosen to trust "xxxxxxx", the issuer of the server's security certificate. Error Number: 183