Objective
This article describes how to deploy an updated version of NetScaler Gateway Plug-in for Mac OS X from the NetScaler Gateway appliance. There is a version of NetScaler Gateway plug-in which is bundled as part of the installed NetScaler software release that can be overwritten with a later version.
Citrix Access Gateway For Mac Sierra 10.13
Instructions
To deploy an updated version of NetScaler Gateway Plug-in for Mac OS X, complete the following procedure:
Log on to NetScaler Command Line through any SSH client and run the following command to switch to the shell prompt on the appliance:
shell
Run the following commands to open the directory that contains the Macintosh client:
root@ns# cd /var/netscaler/gui/vpns/scripts/mac/
root@ns# ls -la
total 20518
drwxr-xr-x 2 root 2 512 Jul 16 10:13 .
drwxrwxrwx 5 daemon 2 512 Jul 4 12:31 ..
-r--r--r-- 1 root 1001 10485754 Apr 23 02:31 Citrix_Access_Gateway.dmg
-r--r--r-- 1 root 1001 12 Jul 16 10:14 macversion.txt
Run the following command to back up the existing version of the plug-in:
root@ns# mv Citrix_Access_Gateway.dmg Citrix_Access_Gateway.dmg.bak
Upload the new version to the same directory and with the exact same name Citrix_Access_Gateway.dmg by using any file transfer application such as WinSCP:
root@ns# ls -la
total 20518
drwxr-xr-x 2 root 2 512 Jul 16 10:13 .
drwxrwxrwx 5 daemon 2 512 Jul 4 12:31 ..
-r--r--r-- 1 root 2 10469427 Jul 16 10:13 Citrix_Access_Gateway.dmg
-r--r--r-- 1 root 1001 10485754 Apr 23 02:31 Citrix_Access_Gateway.dmg.bak
Ensure that the permissions for the new file are read-only, if necessary run a change mode command:
root@ns# chmod 444 Citrix_Access_Gateway.dmg
Run the following command to view the version and build number of the plug-in in the macversion.txt file:
root@ns# cat macversion.txt
2.1.2 (102)
Change the macversion.txt file to the version and build number installed; in this example 2.1.2 (200) using vi or edit or any other text editor.
When a user connects to the NetScaler Gateway portal using an older client, they will be prompted to upgrade:The pluginlist.xml file exists only in NetScaler Gateway version 11.0 and later. Modify the version and compatibleFrom attributes as shown in the following example:
Sample plugin node with type 'MAC-VPN' in pluginlist.xml before update.
Sample plugin node with the version and compatibleFrom updated to 3.1.4 (357).
Even though you see the message that installation was successful, VPN connections to NetScaler Gateway will not work.
This issue doesn’t arise if you upgrade from older Mac OS to High Sierra because the extensions were already approved during the previous plug-in installation on older OS.
Citrix Gateway Update
Solution
As per the suggestion in the popup, navigate to System Preferences > Security & Privacy and allow the blocked extensions. If the problem persists, re-install the plug-in.
Note: You might or might not get the registration blocked message.
Problem Cause
macOS High Sierra has introduced a new feature that prompts the user to approve new third-party kernel extensions.