Netscaler 10.1 and Renewing a Cert

Posted on 2014-10-22
Last Modified: 2016-10-25
I have been given the task to renew one of the certs on our Netscaler. We are changing it from a 1 or 3 year cert.  Are their any issues I should be aware of? What about a service outage for the hosted application?

I have already been reading the KN articles on how to generate a CSR and export the cert to PFX but want to run this by the Citrix Experts first.
Question by:compdigit44
  • 3
  • 2

Accepted Solution

akalyan911 earned 500 total points
ID: 40397861
To update a certificate from the GUI of the appliance, complete the following procedure:

In the Navigation pane, expand the SSL node.

Click Certificates.

In the SSL Certificates page, select the certificate you want to update.

Click Update.

User-added image
For the Certificate Filename, click Browse.

Navigate and select the appropriate certificate file.

For the Key Filename, click Browse.

Navigate and select the appropriate key file.

If the certificate is password protected, specify the password in the Password field.

Select the appropriate Format option.

Click OK.

To update the certificate from the command line interface, the following is the syntax for the command.

update ssl certkey <Cert_Key_Name> [-cert <String>]
[(-key <String> [-password]) | -fipsKey <String>]
[-inform (DER|PEM)][-noDomainCheck]

Note: If the private key is password protected, you must specify the password. If you do not do so, you are prompted to specify the password.

Expert Comment

ID: 40397864
You can check the below two links for more information , this articles were very clear and updated by Citrix support..
LVL 19

Author Comment

ID: 40398196
Thanks everyone.. Would updating the Cert cause and service problems with the service the cert is assigned to on the Netscaler? As I update the cert on the Netscaler what will happen with the back end server that would still be using the old cert
LVL 19

Author Comment

ID: 40400251
Any thoughts on this?
LVL 19

Author Comment

ID: 40400263
If I want to change a cert from 1 year to 3 year do I need a new CSR or should I select update from the SSL menu?

Join & Write a Comment

When we have a dead host and we lose all connections to the ESXi, and we need to find a way to move all VMs from that dead ESXi host.
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now