We use citrix gateway Plugin+ nedsacler as our full VPN solution . The gateway is configured to check for device certificate issued by the PKI infrsatructre In one of the machines we found that the gateway plugin was not requesting to choose the certificate the first time it was opened. So it was failing the EPA check. We tried uninstall and resinstall of the plugin however it still would not open request to choose the device certifciate . We manullay edited the config.js at C:\Users\ User01 \AppData\Local\citrix\AGEE and placed the dummy devCert highlighted in bold in the example: {"auto open homepage":false,"connectingTo":"https://vpn.domain.com","connections":[{ "devCert":"1846168a1880868155848661825646166a1868868155848a8c664e6f121468284f606c28416f6d18666e10166a186086815584818c624e4f412846151468656e1460616614606f6e,a88212e0808f64e4aa5e500e88", "name":"vpn.domain.com","url":"https://vpn.d...