Swapping an SSL Certificate

The following instructions will walk you through how to upload, install and bind and an SSL certificate to a virtual server hosted off a NetScaler.


As you can see from above this guide is assuming that you have a CRT file. Okay, let's begin; start by logging onto the NetScaler that you'll be working with and then expand out Traffic Management (1), SSL (2) and click on Manage Certificates / Keys / CSRs (3):




Inside the Manage Certificates window you will will be displayed with all the key files and certificates that the NetScaler can see in the /nsconfig/ssl directory. We need to upload our certificate file and key file into this directory. To do that start by clicking on the upload button (1)



This will popup a dialog box find your certificate (1) and key file (2) on the computer and upload them to the NetScaler.

 

Now that we have uploaded the SSL Certificate to the NetScaler the next thing we need to do is to install the certificate onto the NetScaler. To do this you need to select the Certificates node (1) under SSL and click on the install button (2)



Inside the install certificate node you will be displayed with the following option;

• Certificate-Key Pair Name (1) - This is the name of the certificate this needs to be unique 
• Certificate File Name (2) - Browse the file on the NetScaler and locate your .crt file
• Key File Name (3) - Browse the file on the NetScaler and locate your key file
• Create will create your install request (4)

Now that we have the certificate installed on the NetScaler we then need to bind the certificate to a virtual server. Start by expanding out the SSL Offload node (1) and then click on virtual servers (2), identify your virtual server and double click the server to open the properties of that VIP (3).



Inside the virtual server click on the very last tab, SSL Settings (1), and then locate your certificate in the list under the available pane (2) Add the certificate to the virtual server by clicking on Add (3) and remove the old certificate (4) Once you have confirmed that you're happy with the certificate bound to that device click on Ok to confirm (5).