NetScaler MPX

Install a certificate and key on the LOM GUI

December 31, 2023

Contributed by:

C S S

Citrix recommends using HTTPS to access the LOM GUI. To use HTTPS, you must replace the default SSL certificate with one from a trusted certificate authority and upload a private key to the LOM GUI.

To encrypt SNMP alerts, set up an SSL certificate and private key. In the GUI, navigate to Configuration > SSL Certification and apply the SSL certificate and private key. See the NetScaler Secure Deployment Guide for more information about how to securely deploy the LOM in your network. To enable encryption and learn the security measures for LOM, see NetScaler Secure Deployment Guide.

If you make a mistake, you must restore the BMC to the factory defaults to erase the certificate and key. Use the following shell command:

ipmitool raw 0x30 0x40
<!--NeedCopy-->

Note: The certificate file must contain only the certificate. The certificate and key must not be in the same file. Make sure that the certificate contains only the certificate and that the key file contains only the key.

Upload a trusted certificate and private key by using the LOM GUI

Navigate to Configuration > SSL Certification.
In the right pane, click the Choose File buttons to select a new SSL certificate and a new private key.
To verify that you have selected the correct certificate and private key, check the file names of the certificate and key, which appear next to the Choose File buttons.
Click Upload. A message informs you that uploading a new SSL certificate replaces the existing (default) certificate.
Click OK.
When a message informs you that the certificate and key have been uploaded successfully, click OK to reset the device.

The reset takes approximately 60 seconds. You are then redirected to the logon page.
Log on to the LOM GUI by using your default credentials. Note: If the certificate or key is invalid, the BMC reboots, tries the new settings, and reverts to using the previous settings.
In the address bar, click the lock icon to display the connection tab, as shown in the following screenshot.
Click Certificate information to display details about the certificate that you uploaded.

Note: Best practices for LOM and ADC security are covered in NetScaler Secure Deployment Guide.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Install a certificate and key on the LOM GUI

December 31, 2023

Contributed by:

C S S

December 31, 2023

Contributed by:

C S S

Install a certificate and key on the LOM GUI

Upload a trusted certificate and private key by using the LOM GUI

In this article