Netscaler 10.1 and Renewing a Cert

Posted on 2014-10-22
Medium Priority
Last Modified: 2016-10-25
I have been given the task to renew one of the certs on our Netscaler. We are changing it from a 1 or 3 year cert.  Are their any issues I should be aware of? What about a service outage for the hosted application?

I have already been reading the KN articles on how to generate a CSR and export the cert to PFX but want to run this by the Citrix Experts first.
Question by:compdigit44
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2

Accepted Solution

akalyan911 earned 2000 total points
ID: 40397861
To update a certificate from the GUI of the appliance, complete the following procedure:

In the Navigation pane, expand the SSL node.

Click Certificates.

In the SSL Certificates page, select the certificate you want to update.

Click Update.

User-added image
For the Certificate Filename, click Browse.

Navigate and select the appropriate certificate file.

For the Key Filename, click Browse.

Navigate and select the appropriate key file.

If the certificate is password protected, specify the password in the Password field.

Select the appropriate Format option.

Click OK.

To update the certificate from the command line interface, the following is the syntax for the command.

update ssl certkey <Cert_Key_Name> [-cert <String>]
[(-key <String> [-password]) | -fipsKey <String>]
[-inform (DER|PEM)][-noDomainCheck]

Note: If the private key is password protected, you must specify the password. If you do not do so, you are prompted to specify the password.

Expert Comment

ID: 40397864
You can check the below two links for more information , this articles were very clear and updated by Citrix support..


LVL 20

Author Comment

ID: 40398196
Thanks everyone.. Would updating the Cert cause and service problems with the service the cert is assigned to on the Netscaler? As I update the cert on the Netscaler what will happen with the back end server that would still be using the old cert
LVL 20

Author Comment

ID: 40400251
Any thoughts on this?
LVL 20

Author Comment

ID: 40400263
If I want to change a cert from 1 year to 3 year do I need a new CSR or should I select update from the SSL menu?
Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After several days of searching and hunting for limited documentation, I wanted to share this guide to hopefully save someone the hassle of trying to figure this out on their own. I have tested this on Xendesktop 7.1 and PS 4.5 running simultaneous…
Giving access to ESXi shell console is always an issue for IT departments to other Teams, or Projects. We need to find a way so that teams can use ESXTOP for their POCs, or tests without giving them the access to ESXi host shell console with a root …
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
In this video tutorial I show you the main steps to install and configure  a VMware ESXi6.0 server. The video has my comments as text on the screen and you can pause anytime when needed. Hope this will be helpful. Verify that your hardware and BIO…
Suggested Courses

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question