In SSL offload and acceleration
In Citrix ADC 12.1
In Citrix ADC
In All products
Product documentation
In SSL offload and acceleration
In Citrix ADC 12.1
In Citrix ADC
In All products
Citrix ADC
13.0 12.1 12.0 11.1 10.5
View PDF

Additional ADC configuration

October 14, 2020
Contributed by: 
S S

1) Generate a key on the HSM. Use third party tools to create keys on the HSM.

2) Add an HSM key on the ADC.

Important!: The # character is not supported in a key name. If the key name include this character, the load key operation fails.

To add a Safenet HSM key by using the CLI:

At the command prompt, type:

add ssl hsmkey <KeyName> -hsmType SAFENET -serialNum <serial #> -password

where:

-keyName is the key created on the HSM by using third party tools.

-serialNum is the serial number of the partition on the HSM on which the keys are generated.

Note: For HSM in a high availability setup, use the serial number of the high availability group.

-password is the password of the partition on which the keys are present.

To add a Safenet HSM key by using the GUI:

Navigate to Traffic Management > SSL > HSM and add an HSM key. You must specify the HSM Type as SAFENET.

3) Add a certificate-key pair on the ADC. You must first use a third party tool to generate a certificate associated with the key. Then, copy the certificate to the /nsconfig/ssl/ directory on the ADC.

Note: The key must be an HSM key.

To add a certificate-key pair on the ADC by using the CLI:

At the command prompt, type:

add ssl certkey <CertkeyName> -cert <cert name> -hsmkey <KeyName>

To add a certificate-key pair on the ADC by using the GUI:

  1. Navigate to Traffic Management > SSL.
  2. In Getting Started, select Install Certificate (HSM) and create a certificate-key pair using an HSM key.

4) Create a virtual server and bind the certificate-key pair to this virtual server.

For information about creating a virtual server, click SSL virtual server configuration.

For information about adding a certificate-key pair, click Add or update a certificate-key pair.

For information about binding a certificate-key pair to an SSL virtual server, click Bind the certificate-key pair to the SSL virtual server.

Additional ADC configuration

October 14, 2020
Contributed by: 
S S
October 14, 2020
Contributed by: 
S S

In this article