Citrix NetScaler - How to generate a CSR and Install Signed Certificate

 

Enable SSL Offload

1. Navigate to System –> Settings and click Configure Basic Features

image

2. Select SSL Offloading and click OK

image

Create the RSA Key

1. Navigate to Traffic Management –> SSL –> SSL Files

image

2. Click Create RSA Key

image

3. Enter in the following details (Only the fields marked * are required, but I recommend filling in more details) and click Create

  • A file name, you will need this later, so make note
  • A key size (2048 is OK – The higher the number, the longer it will take to generate)
  • The PEM format and PEM encoding algorithm
  • The passphrase

image

image

Create the Certificate Signing Request (CSR)

1. Click CSRs in the menu (It’s located here: Traffic Management –> SSL –> SSL Files)

image

2. Click Create Certificate Signing Request (CSR)

image

3. Enter in the following details:

  • Request file name
  • Key file name (Created in the previous step)
  • Format
  • Passphrase for the key
  • The Digest Method
  • The other required files

And click Create

image

Provide the CSR to the Certificate Authority (CA)

I’m using StartSSL in the example below.

1. Select the CSR and click Download

image

2. Open the Certificate in a text editor and copy the text

3. Paste the text into the CSR request form

image

4. Download your certificate

image

Install the certificate

1. In the top menu, click Certificate

image

2. Click Upload

image

3. Browse for the file that you downloaded (You can use the Apache files) and click OK

image

4. Navigate to Traffic Management –> SSL –> SSL Certificate –> Server Certificates

image

5. Click Install

image

6. Enter in a name for the Certificate-Key Pair, choose the certificate file (you just uploaded), the Key File and enter the password for the Key file

image

7. Click Install

Popular posts from this blog

Get local computer UUID/GUID using Windows Powershell

Use the following syntax to get the local computer's UUID/GUID using Windows Powershell: get-wmiobject Win32_ComputerSystemProduct  | Select-Object -ExpandProperty UUID Add -computername after the WMI class to find a remote computer's UUID, example: get-wmiobject Win32_ComputerSystemProduct -computername RANTPC | Select-Object -ExpandProperty UUID
Read more

gPLink and gPOptions

gPLink is a property for sites, domains and organisational units that contains a prioritised list of GPOs linked to the node. gPOptions is a property that contains all Block Policy Inheritance settings for the node. To manage GPO links on a node, you must have read and write access to the gPLink and gPOptions properties.
Read more

PSLoggedOn Getting Started on Windows Server 2008 R2

Image
PSLoggedOn is a tool I downloaded to allow me to find out which computers a user is currently logged on to. Getting it up and running wasn’t exactly easy. I’m running a Windows Server 2008 R2 test environment. The first error I encountered was: Error browing network: The list of servers for this workgroup is not currently available. Note: I kept the spelling mistake from the error message to make it easier to find via search engines. To get past this error, you have to enable and start the “Computer Browser” service. Then I started getting the error telling me that the Administrator is not logged on. That’s simply not true because I am logged onto another server (Name: ELARA): I turned the firewall OFF OFF OFF (It is a test network after all). I enabled Network Discovery and to do that I went on a service starting frenzy: DNS Client, Function Discovery Resource Publication, SSDP Discovery, and UPnP Device Host, Computer Browser After all that, I ran the script against the se...
Read more