Certificate Services Support

Purpose: SSL/TLS Certificate Installation Guide
For Citrix Access Gateway (Access Gateway Administration Tool v 4.6.1+)

Skip to Installation

Need Certificate Signing Request (CSR) help? Please see our technote on how to generate a CSR in Citrix Access Gateway here.

Before you begin...

• Never share private key files. 

• If you plan on using the same certificate on multiple servers always transfer the private key using a secure method (e-mail is not considered a secure method of transfer).

• Make sure you run the SSL Server Test at the end of the installation process to check your certificate configuration against SSL/TLS Best Practices.

• For more information on SSL/TLS Best Practices, click here.
   

1. Click the Download button in the pickup wizard to download your certificate files. Clicking the download button will produce a file a zip file that contains your Server Certificate and Certificate Chain Bundle file.

2. From the Access Gateway Administration Tool, select the Access Gateway Cluster tab and then open the window for the Access Gateway.

3. Under the Administration tab, click Manage next to Manage trusted root certificates.



4. Click Upload Trusted Root Certificate and browse to find the ChainBundle1.crt file created above.

5. Click Open to complete the installation.



7. From the Access Gateway Administration Tool, select the Access Gateway Cluster tab and then open the window for the Access Gateway.

8. Under the Administration tab, click Browse next to Upload a .crt signed certificate.      

9. Browse to your Server Certificate file saved in Step 1 and click Open.

10. You should see a dialog box indicating the certificate upgrade was successful. Click OK.       

11. Under the Administration tab, click Restart next to Restart the appliance.

11. You should see a dialog box confirming the request. Click Restart to restart the gateway.

Your SSL/TLS certificate should be installed. 

Need Installation help? See our article here.

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance: 

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET 
North America (toll free): 1-866-267-9297 
Outside North America: 1-613-270-2680 (or see the list below) 
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.