Citrix NetScaler VPX - 安装SSL证书

点击数：80092014-11-28 11:05:41　来源: digicert

ii. NetScaler VPX: How to Install Your SSL Certificate

1. Log into your NetScaler device console.

2. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management and then click SSL.

   

3. On the NetScaler > Traffic Management > SSL page, under Tools, click Manage Certificates / Keys / CSRs.

4. In the Manage Certificates / Keys / CSRs window, click Upload to locate, select, and upload your SSL Certificate .pem file (i.e. yourdomain_com.pem).

   

5. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management > SSL and then click Certificates.

   

6. On the NetScaler > Traffic Management > SSL > SSL Certificates page, click Install.

7. In the Install Certificate window, enter the following information:

   Certificate-Key Pair Name*	Create a name for the certificate (i.e. Example).
   Certificate File Name*	i. In the Browse drop-down list, select Appliance.
   	ii. Click Browse to browse to and select your SSL Certificate file (i.e. /nsconfig/ssl/yourdomain_com.pem).
   	iii. Click Select and then click Open.
   Key File Name	i. In the Browse drop-down list, select Appliance.
   	ii. Click Browse to browse to and select your RSA key file (i.e. /nsconfig/ssl/example.key) that you created.
   	iii. Click Select and then click Open.
   Certificate Format	Select PEM.
   Password	Enter the password that you used when creating your CSR.
   Certificate Bundle	Check this box.
   	If you do not have the Certificate Bundle feature, finish installing your SSL Certificate.
   	Then, follow the instructions in the Certificate Bundle Note.
   Notify When Expires	Select Enabled to be notified before your certificate expires.
   Notification Period	Enter the number of days before the certificate expires that you want to be notified.

   

8. Click Create and then click Close.

9. On the NetScaler > Traffic Management > SSL > SSL Certificates page, your SSL and Intermediate Certificates are added to the list of certificates.

   Your SSL Certificate is listed by the name that you created for it during installation (i.e. Example) and the Intermediate Certificate is listed by that same name with _ic1 appended to it (i.e. Example_ic1). If you do not have the Certificate Bundle option, you see only your SSL Certificate (i.e. Example).

   Certificate Bundle Note: If you do not have the Certificate Bundle feature, you need to install the ChinaSSLCA Intermediate Certificate before binding your SSL Certificate to a virtual server. See NetScaler VPX: How to Install the ChinaSSLCA Intermediate Certificate.

   

How to Verify the SSL and Intermediate Certificates Are Linked

1. On the NetScaler > Traffic Management > SSL > SSL Certificates page, select your SSL Certificate (i.e. Example).

   

2. In the Actions drop-down list, select Cert Links.

3. In the SSL Certificate Links window, the _ic1 certificate should be listed as the CA Certificate Name for your SSL Certificate (i.e. Certificate Name:Example and CA Certificate Name: Example_ic1).

   

iii. NetScaler VPX: How to Bind Your SSL Certificate to a Virtual Server

1. In the NetScaler console, on the Configuration tab, in the tree menu, expand NetScaler Gateway and then click Virtual Servers.

   

2. On the NetScaler > NetScaler Gateway > NetScaler Gateway Virtual Servers page, select the virtual server to which you want to bind your certificate and then click Open.

3. In the Configure NetScaler Gateway Virtual Server window, on the Certificates tab, in the Available section, select your SSL Certificate and then clickAdd.

   

4. In the Configured section, select the old certificate (i.e. Test) used to configure the virtual server and click Remove.

5. Click OK.

6. On the NetScaler > NetScaler Gateway > NetScaler Gateway Virtual Servers page, in the upper right corner click the save symbol (diskette).

   

7. You have successfully installed and configured your Citrix NetScaler SSL Certificate.

Verifying Your Certificate is Configured Correctly

To verify that you correctly configure the SSL Certificate, use https to visit your website.

Test Your Installation

If your website is publicly accessible, our ChinaSSL SSL Installation can help you diagnose common problems.

Troubleshooting

• ‘Not sending intermediate certificate’ Error

  If you received a ‘Not sending intermediate certificate’ error, you need to install the ChinaSSLCA intermediate certificate as a separate file and link your SSL Certificate to it. See NetScaler VPX: How to Install the ChinaSSLCA Intermediate Certificate.

  

• No Certificate Bundle Feature

  If your Citrix NetScaler VPX console does not contain the Certificate Bundle feature you need to install the ChinaSSLCA intermediate certificate as a separate file and link your SSL Certificate to it. See NetScaler VPX: How to Install the ChinaSSLCA Intermediate Certificate.

 

ii. NetScaler VPX: How to Install the Intermediate Certificate

1. Log into your NetScaler device console.

2. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management and then click SSL.

   

3. On the NetScaler > Traffic Management > SSL page, under Tools, click Manage Certificates / Keys / CSRs.

4. In the Manage Certificates / Keys / CSRs window, click Upload to locate, select, and upload the ChinaSSLCA.crt file.

   

5. In the NetScaler console, on the Configuration tab, in the tree menu, expand Traffic Management > SSL and then click Certificates.

   

6. On the NetScaler > Traffic Management > SSL > SSL Certificates page, click Install.

7. In the Install Certificate window, enter the following information:

   Certificate-Key Pair Name*	Enter ChinaSSLCA.
   Certificate File Name*	i. In the Browse drop-down list, select Appliance.
   	ii. Click Browse to browse to and select the ChinaSSLCA.crt file (i.e. /nsconfig/ssl/ChinaSSLCA.crt).
   	iii. Click Select and then click Open.
   Key File Name	N/A (leave blank).
   Certificate Format	Select PEM.
   	The ChinaSSLCA.crt file is .pem formatted; it just uses a .crt extension.
   Password	N/A (leave blank)
   Certificate Bundle	• If you are using this instruction because you do not have the Certificate Bundle feature in your
   	Citrix NetScaler VPX, you will not see this option.
   	• If you are using this instruction because you received a ‘Not sending intermediate certificate’ error,
   	DO NOT check this box.
   Notify When Expires	Do not check this box.

   

8. Click Create and then click Close.

9. On the NetScaler > Traffic Management > SSL > SSL Certificates page, the ChinaSSLCA intermediate certificate is added to list of certificates.

   You are ready to link your SSL Certificate to the ChinaSSLCA Intermediate Certificate.

   

iii. NetScaler VPX: How to Link Your SSL Certificate to the Intermediate Certificate

1. On the NetScaler > Traffic Management > SSL > SSL Certificates page, select your SSL Certificate (i.e. Example) and then in the Actions drop-down list, select Link.

   

2. In the Link Server Certificate(s) window, in the CA Certificate Name* drop-down list, select ChinaSSLCA and then, click OK.

   

3. Your SSL Certificate is now linked to its intermediate certificate.

原文标题：Citrix NetScaler VPX - 安装SSL证书
原文地址：https://www.chinassl.net/ssl_install/n547.html
版权所有@转载请注明出处：CHINASSL[https://www.chinassl.net]

【责任编辑：中国数字证书CHINASSL】 (Top) 返回页面顶端