Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool

Install the Server Certificate on the NetScaler. From the GUI, go to SSL Certificates and click Add. Enter the information for: Certificate-Key Pair Name. Certificate Request File Name. (Click Browse and select the Server Certificate created previously) Private Key File Name. (Click Browse and select the Server Private Key created. Jan 30, 2019  From release 12.1 build 50.x, you can create an RSA or DSA key in PKCS#8 format. All SSL certificates and keys are stored in the /nsconfig/ssl folder on the appliance. For added security, you can use the Data Encryption Standard (DES) or triple DES (3DES) algorithm to encrypt the private key stored on the appliance.

Applicable Products

  • NetScaler Gateway 10.1
  • Access Gateway 10

Objective

This article describes how to manually create and install self-signed Server and Root CA test certificates using a Public Key Size greater than 512 bits for implementation between Access Gateway Enterprise Edition, Web Interface, and Presentation Server.
The GUI on the Access Gateway has a tool for creating and installing self-signed test Server and Root CA Certificates available under:

SSL >> SSL Certificates >> Create and Install a Server Test Certificate:

When this link is selected, the Access Gateway prompts the user to provide:
Certificate File Name and Fully Qualified Domain Name:

After the requested information is provided the Access Gateway creates the following seven files under the /nsconfig/ssl directory:

Server Certificate files:

Private Key of the server certificate

VMware vSAN Product Evaluation Center. This evaluation center features technical resources to help make your evaluation a success. VSAN is embedded in the VMware vSphere kernel, so your free trial downloads include vSphere and vCenter Server. Vmware vsan license key generator. Apr 22, 2017  VMWare vCenter Server 6.0 Installation & Configuration Step by Step - Duration. How to license your hosts and vCenter server for labs - Duration: 5:18. Bob Danielson 12,383 views.

company.example.cer.key

CSR of the server certificate

company.example.cer.req

Server certificate

company.example.cer.cert

Certificate Authority (CA) files:

Private Key of the Root CA certificate

company.example.cer-root.key

CSR of the Root CA certificate

company.example.cer-root.req

Root CA certificate

SiteGround uses key pairs for SSH authentication purposes, as opposed to plain username and password. More information on SSH keys is available here. You can generate an SSH key pair in Mac OS following these steps. Adding your SSH key to the ssh-agent. Before adding a new SSH key to the ssh-agent to manage your keys, you should have checked for existing SSH keys and generated a new SSH key. When adding your SSH key to the agent, use the default macOS ssh-add command, and not an application installed by macports, homebrew, or some other external source. Generate ssh public private key mac. Oct 06, 2018  This guide goes through setting up SSH keys on macOS Mojave 10.14 back to Mac OSX 10.11 and also a secure password-less SSH connection between a local macOS workstation and a remote server also running a Linux variant operating. Sep 26, 2019  Manually generating your SSH key in macOS. Modified: 26 Sep 2019 21:20 UTC. You generate an SSH key through macOS by using the Terminal application. Once you upload a valid public SSH key, the Triton Compute Service uses SmartLogin to copy the public key to any new SmartMachine you provision. Choose to Import Public Key and paste your SSH.

company.example.cer-root.cert

Serial Number of the Certificate

CAserial

The new self-signed/test server certificate will be displayed under SSL > Certificates:

The limitation of these 6 files, is that its Public Key Size is 512 bits. You can verify that on the GUI by going to SSL >> Certificates, highlight the certificate (such as: company.example.cer) and click Details:

For implementation between the Access Gateway Enterprise Edition, Web Interface and Presentation Server the minimum Public Key Size supported is 1024 bits.
The following procedure describes the necessary steps to manually create and install a self-signed server and root test certificates for the FQDN company.example.com using a Public Key Size greater than 512 bits.

Note: Certificates created with this procedure are not suitable for use with virtual server on NetScaler Gateway because of enhanced security in the current versions of the Citrix Receiver for all platforms. See CTX101990 - Error: Server certificate received is not trusted (SSL Error 61).

Instructions

The following are the prerequisites:

  • Access to the Access Gateway Enterprise Edition’s Graphical User Interface (GUI)

  • WinSCP or equivalent secure file transfer application

  • The Access Gateway must have an appropriate license installed for Enterprise or Platinum Edition.

Complete the following procedures:

Create ROOT CA files: Private Key, Certificate Signing Request (CSR) and ROOT CA Certificate

ROOT CA Private Key

  1. From the GUI, go to SSL > SSL Keys > Create RSA Key. Enter the information for:
    Key Filename*
    Key Size (bits)* (Enter 1024)

  2. Select Create and then Close.

ROOT CA Certificate Signing Request (CSR)

  1. From the GUI, go to SSL > SSL Certificates > Create Certificate Request.

  2. Enter the information for:
    Request File Name*
    Key File Name* (Click Browse… and select the private key created in the previous step)

  3. Enter the information under Distinguished Name Fields to reflect a ROOT CA Certificate (Refer following screen shot)

  4. Select Create and then Close.

ROOT CA Certificate

  1. From the GUI, go to SSL > SSL Certificates > Create Certificate.

  2. Enter the information for:
    Certificate File Name*
    Certificate Type (make sure ROOT-CA is selected)
    Certificate Request File Name* (Click Browse… and select the CSR created in the previous step)
    Key File Name* (Click Browse… and select the private key created previously)

  3. Select Create and then Close.

Create SERVER Files: Private Key, Certificate Signing Request (CSR) and Server Certificate

Server Private Key

  1. From the GUI, go to SSL > SSL Keys > Create RSA Key. Enter the information for:
    Key Filename*
    Key Size (bits)* (Enter 1024)

  2. Select Create and then Close.

Server Certificate Signing Request (CSR)

  1. From the GUI, go to SSL > SSL Certificates > Create Certificate Request.

  2. Enter the information for:
    Request File Name*
    Key File Name* (Click Browse… and select the private key created in the previous step)

  3. Enter the information under Distinguished Name Fields to reflect a Server Certificate (Refer following screen shot)

  4. Select Create and then Close.

Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool

Server Certificate

  1. From the GUI, go to SSL > SSL Certificates > Create Certificate.

  2. Enter the information for:
    Certificate File Name*
    Certificate Type (make sure Server is selected)
    Certificate Request File Name* (Click Browse… and select the Server CSR created in the previous step)
    CA Certificate File Name* (Click Browse… and select the ROOT CA Certificate created previously)
    CA Key File Name* (Click Browse… and select the ROOT CA Private Key created previously)
    CA Serial Number File* (Click Browse… and select the file CA serial if present on the appliance or the file ns-root.srl)

    Or *CA serial file was created when the tool Create and Install a Server Test Certificate was used.

    If the CA serial file is not present then select the file ns-root.srl which is included by default on any appliance.

  3. Select Install and then Close.

Install the Server Certificate on the NetScaler

Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool Download

  1. From the GUI, go to SSL > Certificates and click Add.

  2. Enter the information for:
    Certificate-Key Pair Name*
    Certificate Request File Name* (Click Browse… and select the Server Certificate created previously)
    Private Key File Name* (Click Browse… and select the Server Private Key created previously)

  3. Select Install and then Close.

Export the ROOT CA file

  1. From the GUI, go to SSL > Tools > Manage Certificates / Keys / CSRs > Select the Root CA certificate (company.example_ROOT.cer) > Download and save the file on your local PC.

  2. Select Close.

ROOT CA certificate Installation on Web Interface server and the Client PC testing the connection

Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool Software

  1. Download or copy the ROOT CA certificate used to generate the Access Gateway SSL certificate to the desktop of the server running the Web Interface and the Client PC testing the connection.
    *Do not double-click the ROOT CA file to import the certificate because this only imports the certificate for the current user. The certificate must be trusted by the Local Computer Account.

  2. On the server running the Web Interface and the Client PC, run mmc.exe.
    (Start > Run > mmc.exe)

Add the Certificates snap-in for the Local Computer account

Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool Reviews

  1. Go to File > Add/Remove Snap-in.

  2. Click Add and under Add Standalone Snap-in select Certificates andthen select Add.

  3. Select Computer Account and click Next, then click Finish.

  4. Close the Add Standalone Snap-in window and on the Add/Remove Snap-in window click OK.

  5. Go to Certificates (Local Computer) > Trusted Root Certification Authorities > Certificates. Right-click the Certificates and click All Tasks > Import.

  6. Follow the instructions of the Certificate Import Wizard to locate the CA ROOT certificate on the desktop and close the MMC snap-in after importing completes.

  7. Verify the certificate trust and name resolution by pointing a web browser to the Fully Qualified Domain Name (FQDN) entered on the Server certificate (https://company.example.com).

    The Access Gateway logon page should appear without any certificate errors or warnings. https://luckyson.netlify.app/file-scavenger-30-license-key-generator.html.

Additional Resources

Citrix Netscaler Internal Failure In Ssl Cert Key Generation Tool Box

WinSCP download: http://winscp.net/eng/download.php
PuTTY download: http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html