Ulrik Christensen

Netscaler Gateway

Citrix Netscaler Gateway using self signed certificate

by Leave a Comment

Since Netscaler version 10, its been a lot easier to setup a Netscaler Gateway for your XenApp / XenDesktop installation using the wizard. But there is no way to get around the server certificate, which is needed to get the VIP to response to queries from clients. A public singed certificate costs money and you might want to safe those money because you only need it for testing.

Create a Root Certificate Authority (CA) Certificate.

Go to Configuration -> Traffic Management -> SSL

Click on “Create RSA Key”.

  1. Fill out the “Key Filename” with your own filename.
  2. Write 2048 in “Key Size(bits)”
  3. Click “Create”

Netscaler-pic1

Create a Root CA CSR.

Go to Configuration -> Traffic Management -> SSL

Click on “Create Certificate Signing Request (CSR)”.

  1. Fill out the “Request File Name” with your own filename as shown bellow.
  2. For the “Key Filename”, browse for RSA Key from the previous step.
  3. Fill out the “Distinguished Name Fields”.
  4. Click “Create” at the bottom of the screen.

Netscaler-pic2

Create a Root CA Certificate.

To do that go to Configuration -> Traffic Management -> SSL

Click “Certificate”.

  1. Fill out the “Certificate File Name” with your own Filename.
  2. Make sure the “Certificate Type” is set to “Root-CA”.
  3. Browse for the “Certificate Request File” by clicking on “Browse”.
  4. Browse for the “Key Filename” by clicking on “Browse”.
  5. Click on “Create”.

Netscaler-pic3

Create certificate for Netscaler Gateway

Create a RSA key

To do that that you need to go to Configuration -> Traffic Management -> SSL

Click “Create RSA key”.

  1. Fill in your own filename. I choose to call the file the same as the domain name ending it with .key.
  2. Set “Key Size” to 2048.
  3. Click “Create”

Netscaler-pic4

Create the CSR

Go to Configuration -> Traffic Management -> SSL

Click “Create Certificate Signing Request”.

  1. Fill the “Request File Name” with your own name.
  2. Browse for the key created in the previous step.
  3. Fill out “Distinguished Name Fields” as shown below. Fill out “Common Name” with your FQDN for your Netscaler Gateway.
  4. Click “Create”.

Netscaler-pic5

Create Server Certificate for Netscaler Gateway

Go to Configuration -> Traffic Management -> SSL

Click “Certificate”

Fill “Certificate File Name” with your own filename.

Set Certificate Type to “Server”.

Browse for the CSR file created in previous step.

Browse for the Root CA Certificate created earlier.

Browse for the Root CA Key file.

Browse for the CAserial file.

Click “Create”.

Netscaler-pic6

Your certificate is now ready to use on your Netscaler Gateway.