ZCM 11 on Windows 2008R2 with Citrix 2003/2008 and/or XP workstations.
Last days we got on every device (also on the ZCM-server) the logonscreen of the ZCM Agent. After entering credentials this give the error the there are wrong credentials or certificate incorrect. Credentials are correct. Agent show Not Logged In.

When entering in a commandbox: zac retr (retrust), you see the Agent automatically switches to the user as Logged In.

Because this is on all devices I guess it is something with the certificate. But how to check this certificate if it is expired.
Or what to do else. Can we just recreate the internal certificate as described in 36.2 of the ZCM11 System Administration Guide?