Citrix Access Gateway CSR creation is done through the "Certificate Request Generator" of the "Administration Tool."
1.In the "Administration Tool," select the "Access Gateway Cluster" tab and then open the window for the appliance.
2.In the "Certificate Signing Request" tab, enter your company's information as requested.
The "Access Gateway FQDN" field should be the fully-qualified domain name through which your server is accessed externally, or should begin with an * if you are creating a request for a WildCard.
The password that you specify will be the password for your private key.
3.Clicking "Generate Request" will generate the CSR file, which is saved to your Citrix Access Gateway as an encoded text document.
You will need to open this file as a text file and copy the entire body of it (including the Begin and End Certificate Request tags) into the online order process when prompted.
CSR GENERATION ON CITRIX ACCESS GATEWAY 4.5
Citrix Access Gateway SSL installation is done using the Administration Tool.
Please refer to our instructions for creating an SSL certificate .pem file before proceeding.
1.Once you have located or created the your_domain_name.pem file, you will want to rename it to have a .crt extension (as opposed to a .pem extension).
2.Then, from the "Access Gateway Cluster" tab, open the window for the appliance.
In the "Administration Tool," go to the "Access Gateway Cluster".
3.Under "Administration," select select "Browse" next to "Upload a .crt signed certificate."
4.Browse to your your_domain_name.crt file from step one and click "Open."
You can alternately install the certificate file through the "Administration Portal" by clicking "Maintenance," "Add a signed certificate (.crt)," and then browsing to the your_domain_name.crt file.
Your SSL certificate installation is now complete.
According to Citrix support, you should be using version 4.5.1 or newer. Older versions have compatibility issues with intermediate certificates.
