Skip to main content

Certificate Services Support

User-added image
Certificate Signing Request (CSR) Help
For Citrix NetScaler VPX

Complete the following steps to create your CSR.

This process is in two parts:
1) Creating RSA Key
2) Creating Certificate Signing Request (CSR)

Part 1 of 2: Creating RSA Key

1. Log in to the NetScaler device console.

2. Go to the the Configuration tab.

3. On the left-hand column, expand Traffic Management, and then select  SSL.

4. In the main window, under SSL Keys select Create RSA Key.

User-added image

5. In the Create RSA Key window that opens, enter the requested information to generate the RSA key:

  • Key Filename: A file name for the RSA key file (e.g. myRSA.key)
  • Key Size(bits): 2048
  • Public Exponent Value: On the drop-down list, select the value of F4 (Hex: 0x10001). This is mandatory value for public signed CA certificate.
  • Key Format: Select PEM
  • PEM Encoding Algorithm: (Optional) On the drop-down list, select the algorithm for the RSA Key (DES or DES3). Note this field may be left blank as it is not required.
  • PEM Passphrase: (Optional) Create a passphrase for the RSA key. Note that if you have left PEM Encoding Algorithm blank you will not be able to create a PEM Passphrase.
  • Confirm PEM Passphrase: (Optional) Confirm the passphrase created in the previous field.
User-added image

5. Select OK to finish and then click Close. You may now proceed in creating your CSR.

Part 2 of 2: Creating Certificate Signing Request (CSR)

1. In the NetScaler console, on the Configuration tab, on the left hand-hand menu expand Traffic Management and then select SSL.

2. On the main window (as per path Configuration > Traffic Management > SSL), under SSL Certificates select Create a CSR (Certificate Signing Request).

User-added image

3. In the Create CSR (Certificate Signing Request) window, enter the requested information to generate your CSR:
  • Request File Name: A file name for the CSR key file (e.g. myCSR.csr)
  • Key Filename: Find and select your RSA key file you created earlier
  • Key Format: Select PEM
  • Key Format: Select PEM
  • PEM Passphrase: (Optional) Enter your passphrase created in the previous part (if you created one)
  • Distinguished Name Fields: Enter information related to the organization that will be using the certificate (legal organization name, address where your organization is legally located). Note this information will be verified, so provide accurate information here.
User-added image

4. Select OK and then Close.

5. Back on the NetScaler console, still in Configuration > Traffic Management > SSL (or if not, navigate back there), in the main window, under Tools select Manage Certificates / Keys / CSRs

6. In the Manage Certificates / Keys / CSRs window that opens, select your CSR or request file (e.g., myCSR.csr) and then select View.

7. A viewer window will open that will display the text of your CSR. Copy the text from  -----BEGIN NEW CERTIFICATE REQUEST----- and -----END NEW CERTIFICATE REQUEST---- and paste it where requested in your SSL/TLS certificate order or ECS Enterprise Account request process.


Need Installation help? See our article here.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Australia0011 - 800-3687-7863
Austria00 - 800-3687-7863
Belgium00 - 800-3687-7863
Denmark00 - 800-3687-7863
Finland990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France00 - 800-3687-7863
Germany00 - 800-3687-7863
Hong Kong001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland00 - 800-3687-7863
Israel014 - 800-3687-7863
Italy00 - 800-3687-7863
Japan001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia00 - 800-3687-7863
Netherlands00 - 800-3687-7863
New Zealand00 - 800-3687-7863
Norway00 - 800-3687-7863
Singapore001 - 800-3687-7863
Spain00 - 800-3687-7863
Sweden00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland00 - 800-3687-7863
Taiwan00 - 800-3687-7863
United Kingdom00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088