Citrix ADC

Server certificate support matrix on the ADC appliance

September 21, 2020

Contributed by:

The Citrix ADC appliance supports the following server certificates.

Table 1: Support on Frontend (FE) and Backend (BE) Service

Server certificate/Platform	MPX/SDX (N2 CHIPS) FE	MPX/SDX (N2 CHIPS) BE	MPX/SDX (N3 CHIPS) FE	MPX/SDX (N3 CHIPS) BE	VPX FE	VPX BE
MD5	Y	Y	Y	Y	Y	Y
SHA1	Y	Y	Y	Y	Y	Y
SHA224	Y	Y	Y	Y	Y	Y
SHA256	Y	Y	Y	Y	Y	Y
SHA384	Y	Y	Y	Y	Y	Y
SHA512	Y	Y	Y	Y	Y	Y
RSA Key	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits
DH Key	1024 and 2048 bits	1024 and 2048 bits	1024 and 2048 bits	1024 and 2048 bits	1024, 2048, 3072, and 4096 bits	1024, 2048, 3072, and 4096 bits

Server certificate/Platform	MPX 9700/10500/12500/15500 FIPS with FW 2.2 FE	MPX 9700/10500/12500/15500 FIPS with FW 2.2 BE	MPX/SDX 14030/14060/14080 FIPS FE	MPX/SDX 14030/14060/14080 FIPS BE
MD5	Y	Y	Y	Y
SHA1	Y	Y	Y	Y
SHA224	Y	Y	Y	Y
SHA256	Y	Y	Y	Y
SHA384	Y	Y	Y	Y
SHA512	Y	Y	Y	Y
RSA Key	2048 bits	2048 bits	2048 and 3072 bits	2048 and 3072 bits
DH Key	N	N	N	N

Note:

In release 11.1 and earlier, a Citrix ADC appliance supports the following “signature algorithms” extensions in the back end client hello message: RSA-MD5, RSA-SHA1, and RSA-SHA256. Because SHA 384 and SHA 512 signature algortihms extensions are not supported by the Citrix ADC appliance, some servers, such as Windows IIS servers, reset the connection.

Starting release 12.0, a Citrix ADC appliance supports all the signature_algorithms extensions.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Server certificate support matrix on the ADC appliance

September 21, 2020

Contributed by:

September 21, 2020

Contributed by:

Server certificate support matrix on the ADC appliance

In this article