Skip to main content

SSL/TLS Certificate Installation Guide: Citrix NetScaler

Summary


User-added image
For Citrix NetScaler version 10.5

*Note : Both Entrust L1K and L1M utilize the same Entrust root certificate.

To install the Entrust Root Certificate, you must first download Root cert file (Root.crt) from certificate pick up page. Then complete the following steps:

  1. Click on Configuration tab > Traffic Management > SSL > SSL Certificates
  2. Click on Install button

  1. In the Install Certificate Window, Supply the following information:

- A profile name for the certificate. Example: Entrust Root

- The Certificate File Name. Browse to the local location of your root certificate file (Root.crt).

- Select PEM for the Certificate Format.

User-added image

  1. Click Install button.
  2. The Entrust root certificate will appear on the SSL Certificates list.

User-added image
For Citrix NetScaler version 10.5

To install the Intermediate certificate, you must download Entrust L1K Intermediate file (default file name: Intermediate.crt) from certificate pick up page.

To install the intermediate certificate, complete the following steps:

  1. Click on Configuration tab > Traffic Management > SSL > SSL Certificates
  2. Click on Install button
  3. In the Install Certificate Window, Supply the following information:

-          A name for the certificate. Example: Entrust Intermediate Certificate

- The Certificate File Name . Browse to the local location of your Intermediate file (Intermediate.crt).

- Select PEM for the Certificate Format.

User-added image

  1. Click Install button
  2. The Intermediate Certificate will appear on the SSL Certificates list. NOTE: To continue the step 6 and 7 below, make sure you have already installed the Entrust Root certificate. If not, please refer to our documentation for installing root certificate on this appliance.

User-added image

  1. Select the Intermediate Certificate on the list and then click on Action then select Link .

User-added image

  1. The CA Certificate Name box will be automatically populated with profile name that created during Entrust Root installation process. Example: Entrust Root. Click Ok . If the CA Certificate Name field is empty, then you need to go back to the step on our documentation on how to install the Entrust root certificate properly.

To install the Server certificates, you must first download your Entrust server certificate file (default file name: ServerCertificate.crt) from your certificate pick up link. To install the server certificate, complete the following steps:

STEP 1 – Installing Server Certificate

  1. Click on Configuration tab > Traffic Management > SSL > SSL Certificates
  2. Click on Install button

User-added image

  1. In the Install Certificate Window, Supply the following information:

- A Certificate-Key Pair Name.

- The Certificate File Name. Browse to the location of your Server Certificate file.

- The Private Key File Name. Browse to the location of the private key file that was used to create the certificate signing request.

- Select PEM for the Certificate Format.

User-added image

  1. Click Install button
  2. Your Entrust Server Certificate will be appeared on the SSL Certificates list. NOTE: To continue the step 6 and 7 below, make sure that you have already installed the Roo t and Intermediate certificates. If not, please refer to our documentation for root and intermediate certificates installation on this appliance.
  3. Select your Entrust Server Certificate on the list and then click on Action then select Link.

  1. The CA Certificate Name box will be automatically populated with the profile name that was associated with Entrust Intermediate Certificate. Example: Entrust Intermediate Certificate. Click Ok . If the CA Certificate Name field is empty, you need to go back to the step on how to install the root or intermediate certificates properly.

User-added image

  1. At this point your server certificate is ready for binding.

STEP – 2 BINDING THE SSL CERTIFICATE TO VIRTUAL SERVER

  1. Click on Configuration > NetScaler Gateway > Virtual Servers .
  1. Select your virtual server where do you need to bind with the SSL certificate. Click Edit button.

User-added image

  1. Under Certificates section, click the right arrow on Server Certificate to open Server Certificate Binding window.

User-added image

  1. Click on right arrow button to select server certificate.

  1. Select the certificate that you need to bind from the list and then click OK

  1. The selected server certificate will be populated on Select Server Certificate field. Click Bind button to continue.

  1. Certificate binding process is now complete.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: Smart Phone users may use the 1-800 numbers shown in the table below.
Otherwise, it is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.

Country Number
Australia 0011 - 800-3687-7863
1-800-767-513
Austria 00 - 800-3687-7863
Belgium 00 - 800-3687-7863
Denmark 00 - 800-3687-7863
Finland 990 - 800-3687-7863 (Telecom Finland)
00 - 800-3687-7863 (Finnet)
France 00 - 800-3687-7863
Germany 00 - 800-3687-7863
Hong Kong 001 - 800-3687-7863 (Voice)
002 - 800-3687-7863 (Fax)
Ireland 00 - 800-3687-7863
Israel 014 - 800-3687-7863
Italy 00 - 800-3687-7863
Japan 001 - 800-3687-7863 (KDD)
004 - 800-3687-7863 (ITJ)
0061 - 800-3687-7863 (IDC)
Korea 001 - 800-3687-7863 (Korea Telecom)
002 - 800-3687-7863 (Dacom)
Malaysia 00 - 800-3687-7863
Netherlands 00 - 800-3687-7863
New Zealand 00 - 800-3687-7863
0800-4413101
Norway 00 - 800-3687-7863
Singapore 001 - 800-3687-7863
Spain 00 - 800-3687-7863
Sweden 00 - 800-3687-7863 (Telia)
00 - 800-3687-7863 (Tele2)
Switzerland 00 - 800-3687-7863
Taiwan 00 - 800-3687-7863
United Kingdom 00 - 800-3687-7863
0800 121 6078
+44 (0) 118 953 3088