This article describes how to manually create and install self-signed server and Root Certificate Authority (CA) test certificates using a Public Key Size of 2048 bits for a CloudConnector implementation between two NetScaler VPX appliances.

Requirements

• Enable the SSL feature on both the NetScaler VPX appliances.

  

Instructions

1. Creating Root CA Files for NetScaler VPX Appliance

2. Creating Server Files for NetScaler VPX Appliance

Creating Root CA Files for NetScaler VPX Appliance

1. Creating Root CA Private Key

2. Creating Root CA CSR

3. Creating Root CA Certificate

1. From the GUI, select SSL > SSL Keys > Create RSA Key.

2. Specify the Key Filename.

3. Specify Key Size (bits) as 2048.

4. Click Create and then Close.

   

1. From the GUI, select SSL > SSL Certificates > Create Certificate Request.

2. Specify a Request File Name.

3. Click Browse and select the private key created in the Creating Root CA Private Key section.

4. Specify the information for the Distinguished Name Fields.
   Note: You must specify the details for the ROOT CA Certificate for this appliance.

5. Click Create and then Close.

   

1. From the GUI, select SSL > SSL Certificates > Create Certificate.

2. Specify the Certificate File Name.

3. Select the Root-CA option for Certificate Type.

4. Click Browse and select the CSR created in the Creating Root CA CSR section.

5. Click Browse and select the private key created in the Creating Root CA Private Key section.

6. Click Create and then Close.

   

Creating Server Files for NetScaler VPX Appliance

1. Creating Server Private Key

2. Creating the Server CSR

3. Creating Server Certificate

1. From the GUI, select SSL > SSL Keys > Create RSA Key.

2. Specify the Key Filename.

3. Specify the Key Size (bits) as 2048.

4. Click Create and then Close.

   

1. From the GUI, select SSL > SSL Certificates > Create Certificate Request.

2. Specify the Request File Name.

3. Click Browse and select the private key created in the Creating Server Private Key section.

4. Specify the information for the Distinguished Name Fields.
   Note: You must specify the details for the Server Certificate for this appliance.

5. Click Create and then Close.

   

1. From the GUI, select SSL > SSL Certificates > Create Certificate.

2. Specify the Certificate File Name.

3. Select the Server option for Certificate Type.

4. Click Browse and select the server CSR created in the Creating the Server CSR section for Certificate Request File Name.

5. Click Browse and select the Root CA certificate created in the Creating Root CA Certificate section for CA Certificate File Name.

6. Click Browse and select the file CA serial is available on the appliance or the file ns-root.srl.

   

   

   Or

   

7. Select Install and then Close.

Repeat the procedures Creating Root CA Files for NetScaler VPX Appliance and Creating Server Files for NetScaler VPX Appliance on NetScaler VPX on appliance 2.

The GUI on the Access Gateway Enterprise Edition appliance has a tool to create and install self-signed test Server and Root CA Certificates as shown in the following screen shot:

When you select Create and Install a Server Test Certificate Wizard, the appliance prompts the user to provide Certificate File Name and Fully Qualified Domain Name.

After you provide the preceding information, seven files are generated in the /nsconfig/ssl directory.

The following are the server Certificate files generated:

The following are the server Root CA files generated:

The new self-signed or test server certificate appears under SSL > Certificates.

The limitation of the self-signed certificates is that its Public Key Size is 512 bits and security policies might require a strongest key size. You can verify the key size on the GUI in SSL > Certificates. Select the certificate and click Details.