Gateway

Installing the Signed Certificate on Citrix Gateway

January 8, 2024

Contributed by:

C S C

When you receive the signed certificate from the Certificate Authority (CA), pair it with the private key on the appliance and then install the certificate on Citrix Gateway.

To pair the signed certificate with a private key

Copy the certificate to Citrix Gateway to the folder nsconfig/ssl by using a Secure Shell (SSH) program such as WinSCP.
In the configuration utility, on the Configuration tab, in the navigation pane, expand SSL and then click Certificates.
In the details pane, click Install.
In Certificate-Key Pair Name, type the name of the certificate.
In Certificate File Name, select the menu box in Browse and then click Appliance.
Navigate to the certificate, click Select, and then click Open.
In Private Key File Name, select the menu box in Browse and then click Appliance. The name of the private key is the same name as the Certificate Signing Request (CSR). The private key is on Citrix Gateway in the directory \nsconfig\ssl.
Choose the private key and then click Open.
If the certificate is PEM-format, in Password, type the password for the private key.
If you want to configure notification for when the certificate expires, select Notifies When Expires.
In Notification Period, type the number of days, click Create, and then click Close.

To bind the certificate and private key to a virtual server

After you create and link a certificate and private key pair, bind it to a virtual server.

In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway and then click Virtual Servers.
In the details pane, click a virtual server and then click Open.
On the Certificates tab, under Available, select a certificate, click Add, and then click OK.

To unbind test certificates from the virtual server

After you install the signed certificate, unbind any test certificates that are bound to the virtual server. You can unbind test certificates using the configuration utility.

In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway and then click Virtual Servers.
In the details pane, click a virtual server and then click Open.
On the Certificates tab, under Configured, select the test certificate and then click Remove.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Installing the Signed Certificate on Citrix Gateway

January 8, 2024

Contributed by:

C S C

January 8, 2024

Contributed by:

C S C

Installing the Signed Certificate on Citrix Gateway

To pair the signed certificate with a private key

To bind the certificate and private key to a virtual server

To unbind test certificates from the virtual server

In this article