[German]Brief note for administrators who are responsible for the deployment of the Citrix Cloud Connector. Normally, there is no need to worry about an update of this connector. However, in early May 2023, there is a connector update that administrators should be take care of. The installation of the update in question requires that the required DigiCert G4 root and intermediate certificates have been updated beforehand.
Advertising
I became aware of this issue the other day via the following tweet, which Citrix explains in more detail in the security advisory New certificate requirement for installing/upgrading Citrix Cloud Connector.
The background is that Citrix Cloud Connector versions older than 6.57.0.28833/4.305.0.28833 were signed with a DigiCert code signing certificate based on older DigiCert root and intermediate certificates. To comply with industry standards, code signing certificates that were verified by these older root and intermediate certificates are no longer issued by DigiCert.
As a result, starting with Citrix Cloud Connector version 6.57.0.28833/ 4.305.0.28833, the installer is signed with a DigiCert code signing certificate verified by the modern root certificate "DigiCert Trusted Root G4" and the intermediate certificate "DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1".
Administrators must therefore download and install the new DigiCert G4 root and intermediate certificates before upgrading the Citrix Cloud Connector to the new version by early May 2023. If this is forgotten, the upgrade of the Citrix Cloud Connector to the new version will fail with a certificate error at the beginning of May 2023:
Advertising
For more details, see the Citrix security advisory New certificate requirement for installing/upgrading Citrix Cloud Connector.
Advertising
