2. Citrix NetScaler VPX: Install Your SSL Certificate

After receiving your SSL Certificate, you need to install it on your NetScaler VPX device and then, you can bind it to your virtual server.

ii. NetScaler VPX - How to Install Your SSL Certificate

  1. Log into your NetScaler device console.

  2. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management and then click SSL.

    NetScaler VPX Console 10.1

  3. On the NetScaler > Traffic Management > SSL page, under Tools, click Manage Certificates / Keys / CSRs.

  4. In the Manage Certificates / Keys / CSRs window, click Upload to locate, select, and upload your SSL Certificate .pem file (i.e. yourdomain_com.pem).

    NetScaler VPX Manage Certificates / Keys / CSRs

  5. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management > SSL and then click Certificates.

    NetScaler VPX Console 10.1

  6. On the NetScaler > Traffic Management > SSL > SSL Certificates page, click Install.

  7. In the Install Certificate window, enter the following information:

    Certificate-Key Pair NameCreate a name for the certificate (i.e. Example).
     
    Certificate File Namei. In the Browse drop-down list, select Appliance.

    ii. Click Browse to browse to and select your SSL Certificate file (i.e. /nsconfig/ssl/yourdomain_com.pem).

    iii. Click Select and then click Open.
     
    Key File Namei. In the Browse drop-down list, select Appliance.

    ii. Click Browse to browse to and select your RSA key file (i.e. /nsconfig/ssl/example.key) that you created.

    iii. Click Select and then click Open.
     
    Certificate FormatSelect PEM.
     
    PasswordEnter the password that you used when creating your CSR.
     
    Certificate BundleCheck this box.


     
    Notify When ExpiresSelect Enabled to be notified before your certificate expires.
     
    Notification PeriodEnter the number of days before the certificate expires that you want to be notified.
     

    NetScaler VPX Install Certificate

  8. Click Create and then click Close.

  9. On the NetScaler > Traffic Management > SSL > SSL Certificates page, your SSL and Intermediate Certificates are added to the list of certificates.

    Your SSL Certificate is listed by the name that you created for it during installation (i.e. Example) and the Intermediate Certificate is listed by that same name with _ic1 appended to it (i.e. Example_ic1). If you do not have the Certificate Bundle option, you see only your SSL Certificate (i.e. Example).

    Certificate Bundle Note: If you do not have the Certificate Bundle feature, you need to install the Intermediate Certificate before binding your SSL Certificate to a virtual server.

    NetScaler VPX Console 10.1

How to Verify the SSL and Intermediate Certificates Are Linked

  1. On the NetScaler > Traffic Management > SSL > SSL Certificates page, select your SSL Certificate (i.e. Example).

    NetScaler VPX Console 10.1

  2. In the Actions drop-down list, select Cert Links.

  3. In the SSL Certificate Links window, the _ic1 certificate should be listed as the CA Certificate Name for your SSL Certificate (i.e. Certificate Name: Example and CA Certificate Name: Example_ic1).

    NetScaler VPX SSL Certificates Links

iii. NetScaler VPX - How to Bind Your SSL Certificate to a Virtual Server


    1. In the NetScaler console, on the Configuration tab, in the tree menu, expand NetScaler Gateway and then click Virtual Servers.

      NetScaler VPX Console 10.1

    2. On the NetScaler > NetScaler Gateway > NetScaler Gateway Virtual Servers page, select the virtual server to which you want to bind your certificate and then click Open.

    3. In the Configure NetScaler Gateway Virtual Server window, on the Certificates tab, in the Available section, select your SSL Certificate and then click Add.

      NetScaler VPX Configure NetScaler Gateway Virtual Server

    4. In the Configured section, select the old certificate (i.e. Test) used to configure the virtual server and click Remove.

    5. Click OK.

    6. On the NetScaler > NetScaler Gateway > NetScaler Gateway Virtual Servers page, in the upper right corner click the save symbol (diskette).

      NetScaler VPX Console 10.1

    7. You have successfully installed and configured your Citrix NetScaler SSL Certificate.