Installation Instructions for Citrix Access Gateway 4.x

Solution ID:    SO22569    Updated:    02/18/2015


This document provides installation instructions for Citrix Access Gateway 4.x. If you are not able to perform the steps on the server, RapidSSL recommends to contact Citrix.

Step 1. Obtain the SSL Certificate

    1.    The RapidSSL certificate will be sent by email.
    2.    Copy the certificate imbedded in the body of the email and paste it into a text file
           using Vi or Notepad.

            The text file should look like:

            -----BEGIN CERTIFICATE-----

                        [encoded data]

             -----END CERTIFICATE-----

    3.    Make sure there are 5 dashes to either side of the BEGIN CERTIFICATE and END CERTIFICATE and
           that no white spaces, extra line breaks or additional characters have been inadvertently added.

           NOTE: You can downlaod the certificate also from RapidSSL User Portal by 
           following the steps from this link: SO16222
           Please select X.509 as a certificate format and copy only the End Entity Certificate.
    4.    Save the certificate filename with the .crt extension. For example: public.crt

Step 2. Install the SSL Certificate

    1.    Click the Access Gateway Cluster tab
    2.    Under Administration, next to Upload a .crt signed certificate click Browse 


    3.    Locate the .crt file that you have saved and click Open.
    4.    After the upload is complete, click on the General Networking tab
    5.    In External Public IP or FQDN, under Interface 0, type the IP address or FQDN for 
           which the certificate was registered. 


Step 3.  Download the Root and Intermediate CA Certificate

    1.    Download the Root CA certificate for your SSL product from this link: SO20329
    2.    Copy and paste the file on a Notepad document
    3.    Download the Intermediate CA certificate for your SSL product from this link: AR1548
    6.    Open a Notepad and paste the Intermediate CA certificate and the Root certificate in the following order:
           Note:  The Intermediate CA certificate is on the top followed by the Root CA certificate at the bottom.

           -----BEGIN CERTIFICATE-----
                  [Intermediate CA]
           -----END CERTIFICATE-----
           -----BEGIN CERTIFICATE-----
                         [Root CA]
           -----END CERTIFICATE-----
    7.    Ensure that any additional characters or line breaks have been added
    8.    Save ther file as intermediate_root.crt

Step 4.  Install the Root and the Intermediate CA Certificates on Citrix Access Gateway

    1.    Click the Access Gateway Cluster tab
    2.    Under Administration, next to Manage trusted root certificates click Browse 


    3.    Click "Upload Trusted Root Certificate"
    4.    Locate the intermediate_root.crt file that you have saved ind Step 3
    5.    Click Open to complete installation.
    6.    To verify the certificate installation use the RapidSSL Installation Checker 

Citrix Support

            For more information refer to Citrix Support



RapidSSL has made efforts to ensure the accuracy and completeness of the information in this document. However, RapidSSL makes no warranties of any kind (whether express, implied or statutory) with respect to the information contained herein. RapidSSL assumes no liability to any party for any loss or damage (whether direct or indirect) caused by any errors, omissions, or statements of any kind contained in this document.  Further, RapidSSL assumes no liability arising from the application or use of the product or service described herein and specifically disclaims any representation that the products or services described herein do not infringe upon any existing or future intellectual property rights. Nothing herein grants the reader any license to make, use, or sell equipment or products constructed in accordance with this document. Finally, all rights and privileges related to any intellectual property right described herein are vested in the patent, trademark, or service mark owner, and no other person may exercise such rights without express permission, authority, or license secured from the patent, trademark, or service mark owner. RapidSSL reserves the right to make changes to any information herein without further notice.

Contact Support

US Support:

Order Processing

Technical Support

European Support:

Order Processing

Technical Support

SSL digital certificates sales live chat.

Find Answers

Search Tips