If your data, services or processes become compromised, your organization can suffer damage in just minutes and how fast you communicate during a major IT incident is everything. Learn how to immediately identify incidents & best practices to resolve them quickly and effectively.
Course Of The Month
4 days, 16 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
SSL Certificate not getting installed
Posted on 2013-10-22
Just renewed SSL certificate on my Citrix Access Gateway but it is not getting activated. Certificate expired error msg appeares on the web site. I can see the valid certificate via the IIS console but when you hit the web site it gives the Certificate expired error.
I have Windows 2003, IIS 6 and Citrix XenApps 5
Awaiting response.
Thanks
Advait
I have Windows 2003, IIS 6 and Citrix XenApps 5
Awaiting response.
Thanks
Advait
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3 Comments
Active today
You will still need to reinstall it.
Ensure that you copy the certificate into a text editor. Word Processors such as Microsoft Word will add hidden formatting characters that will stop your certificate from working when installed on your server.
Your certificate should take the following format:
----- BEGIN CERTIFICATE -----
Code
----- END CERTIFICATE -----
Check that there are 5 dashes to either side of BEGIN CERTIFICATE and END CERTIFICATE and that no whitespace, extra line breaks of additional characters have been added during the copy and paste process.
Save the certificate as a .crt file and upload this file to your server. Make a note of the certificate name and location as you will need this when you install your certificate.
then you need to install it:
1) Click Start > All Programs > Administrative Tools > Internet Services Manager (IIS) Manager.
2) Expand your Server Name and select your Website.
3) Under Web Sites, right-click the corresponding Web site you wish to secure and click Properties.
4) Click the Directory Security tab. Then click Server Certificate.
The Web Server Security Wizard will open. Click Next to start the Wizard and then select Process the pending request and install the certificate.
5) Enter the path to your certificate and click Next.
6) Read the summary screen to be sure that you are processing the correct certificate and then click Next. Click Next again to confirm.
Ensure that you copy the certificate into a text editor. Word Processors such as Microsoft Word will add hidden formatting characters that will stop your certificate from working when installed on your server.
Your certificate should take the following format:
----- BEGIN CERTIFICATE -----
Code
----- END CERTIFICATE -----
Check that there are 5 dashes to either side of BEGIN CERTIFICATE and END CERTIFICATE and that no whitespace, extra line breaks of additional characters have been added during the copy and paste process.
Save the certificate as a .crt file and upload this file to your server. Make a note of the certificate name and location as you will need this when you install your certificate.
then you need to install it:
1) Click Start > All Programs > Administrative Tools > Internet Services Manager (IIS) Manager.
2) Expand your Server Name and select your Website.
3) Under Web Sites, right-click the corresponding Web site you wish to secure and click Properties.
4) Click the Directory Security tab. Then click Server Certificate.
The Web Server Security Wizard will open. Click Next to start the Wizard and then select Process the pending request and install the certificate.
5) Enter the path to your certificate and click Next.
6) Read the summary screen to be sure that you are processing the correct certificate and then click Next. Click Next again to confirm.
You need to install the certificate into access gateway. Assuming you have 4.5 which would be about right for the age of your solution, there are some detailed setp-by-step instructions here: http://www.digicert.com/ssl-certificate-installation-citrix-access-gateway.htm
But as you already have a certificate on IIS, you can use the instructions here to export it in a format CAG will understand: http://support.citrix.com/proddocs/topic/access-gateway-10/agee-import-install-windows-cert.html
But as you already have a certificate on IIS, you can use the instructions here to export it in a format CAG will understand: http://support.citrix.com/proddocs/topic/access-gateway-10/agee-import-install-windows-cert.html
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Prologue
It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
This Micro Tutorial will demonstrate how to add subdomains to your content reports. This can be very importing in having a site with multiple subdomains.
This Micro Tutorial will demonstrate how nuggets on the Web are formatted by using Chrome Developer Tools. These tools would not only view the site's CSS but it can also modify it and save the CSS to use on your own site.
Suggested Courses
Course of the Month4 days, 16 hours left to enroll
688 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.