Certificate Installation: Citrix Access Gateway 5.0

May 25, 2018 in Security Appliance Device

To install an SSL certificate for Citrix Access Gateway 5.0, perform the following steps.

Step 1: Install SSL certificate

The COMODO SSL Certificate will be sent by email. The certificate click on the link to extract the zip file, copy and paste it into a text editor (save as cert.pem) such as Notepad or Notepad ++. Do not use Microsoft Word or other word processing programs that may add characters. Confirm that there are no extra lines or spaces in the file.

The text file should look like:

-----BEGIN CERTIFICATE-----
[encoded data]
-----END CERTIFICATE-----

Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and that no white space, extra line breaks or additional characters have been inadvertently added.

1. In the Access Gateway Management Console, click Certificates.
2. Click Import and then select Server (.pem) to import a CA signed root certificate.
3. In Select file to upload, navigate to the certificate and then click Open.

Step 2: Install Intermediate CA certificate

1. Obtain the COMODO Intermediate CA certificate.
2. In the Access Gateway Management Console, click Certificates.
3. On the Certificate Management panel, click Import and then select Trusted (.pem).
4. In Select file to upload, navigate to the file and then click Open.
Note: When you install an intermediate certificate on Access Gateway, you do not need to specify the private key or a password. After the certificate is installed on the appliance, the certificate needs to be linked to the server certificate.

Step 3: Link an Intermediate CA certificate to a SSL server certificate

1. In the Access Gateway Management Console, click Certificates.
2. In the Certificates table, select the server certificate to which you want to link an intermediate certificate and then click Add to Chain.
3. In the dialog box that opens, select a certificate and then click Add for each certificate that you want to add to the chain.
4. When you are finished building the certificate chain, click Close.