ASK SSL Support Desk – Why Can I not Create a PFX From a Citrix Netscaler?

What is Ask SSL Support Desk? It is a summary of random questions that have one to the attention of Acmetek’s most awesome technical support reps. Answered and shared for the SSL Support Desk’s SSL Library which is designed to teach and educate the community. Question: I’m trying to create a pfx file for wildcard cert *.example.com in Citrix Netscaler but I am Failing to do so. Ive crosses checked with the following directions. What am I doing wrong? https://www.digicert.com/csr-creation-ssl-installation-citrix-netscaler.htm#netscaler_vpx_create_csr Short Answer: That is because Citrix Netscaler cannot create pfx files. Netscaler cannot Create pfx format files. It creates pem apache format. Netscaler systems do on the other hand have the ability to import a pfx file, but that pfx […]

Read More

Citrix Netscaler VPX (10) Loadbalancer- CSR Instructions

To generate a Certificate Signing Request (CSR) for Citrix Netscaler, a key pair must be created for the server. These two items are a public key and a private key pair and cannot be separated. Like all key pairs the private key once created will remain on the system where the CSR is made. The CSR public key is what you will submit to a Certificate Authority (CA) to get the public key signed. To generate a CSR on Citrix Netscaler 10 & 10.5 perform the following. Step 1: Generating your private key: Log on to the NetScaler appliance. Under the Configuration tab select SSL in the navigation pane. Under SSL Keys click Create RSA key. Under Key Filename* specify […]

Read More

Citrix Netscaler VPX (10) Loadbalancer – SSL Installation

Like the majority of server systems you will install your SSL certificate on the same server where your Certificate Signing Request (CSR) was created. Your private key will always be left on the server system where the CSR was originally created. Your SSL certificate will not work without this private key file. We will assume that this is the original system. To install your SSL certificate on Citrix Netscaler 10 & 10.5 perform the following. Step 1: Downloading your SSL Certificate & its Intermediate CA certificate: If you had the option of server type during enrollment and selected Other you will receive a x509/.cer/.crt/.pem version of your certificate within the email. Alternately you can access your Certificate User Portal by […]

Read More

How to move certificate from Windows to Citrix Netscaler.

Windows servers use .pfx/.p12 files to contain the public key file (SSL Certificate) and its unique private key file. The Certificate Authority (CA) provides you with your SSL Certificate (public key file). You use your server to generate the associated private key file where the CSR was created. You need both the public key and private keys for an SSL certificate to work properly on any system. Windows uses the pfx/p12 file to contain these two keys; therefore, if you need to transfer your SSL certificate from one server to another or store it someplace for safe keeping you need to create a .pfx backup. Citrix Netscaler is an Apache type system that uses pem/x509 certificate formates for encryption and […]

Read More

Citrix Netscaler VPX Loadbalancer- CSR Instructions

To generate a Certificate Signing Request (CSR) for Citrix Netscaler, a key pair must be created for the server. These two items are a public key and a private key pair and cannot be separated. Like all key pairs the private key once created will remain on the system where the CSR is made. The CSR public key is what you will submit to a Certificate Authority (CA) to get the public key signed. To generate a CSR on Citrix Netscaler perform the following. Step 1: Generating your private key: Log on to the NetScaler appliance. Under the Configuration tab select SSL in the navigation pane. Under SSL Keys click Create RSA key. Under Key Filename* specify the file name […]

Read More