Hi Emanuel,
very good point. I didn't import the root certificate. I didn't think about to import this cert because gpos are used to published it to the clients. But this doesn't work for the thinclients of course.
Adding the root cert should do the trink.
Thanks.
Bergold can you verify this? I can't because I don't have access to the customers environment anymore.