If you want to verify your certificate through a browser, ensure that you include the server hostname as a Subject Alternate Name (SAN). KeyUsage = keyEncipherment, dataEnciphermentĮnsure there are no whitespaces at the end of the lines. Adjust Common name, Organization, Country, State, and Location to reflect your information. Ensure that the user performing the certificate request has adequate permissions to request and issue certificates.Ĭreate a configuration file ( req.conf) for the certificate request:ĭistinguished_name = req_distinguished_name
#OPENSSL WINDOWS INSTALL#
Install OpenSSL on a workstation or server. The password used for the private key pair is “ citrixpass”. The Certificate Authority is named CA1 on server DOMAINCA. The following steps simulate creating a certificate for a Citrix Hypervisor server named “ server1” in the domain “ ”. Simply upload the archived key pair to the server. If a Citrix Hypervisor server requires rebuilding, there is no need to repeat the request process. This method can be scripted to easily replace certificates after expiration, and also gives the ability to store the certificate key pair. Note that these steps are not recommended or supported.
#OPENSSL WINDOWS HOW TO#
For earlier versions of XenServer, you can use the method described in this article to create a certificate. This method is similar to CTX128617 - How to Use IIS to Acquire SSL Certificates for XenServer, except OpenSSL is used to generate the certificate requests.Instead create a separate certificate and key file and use XenCenter or the xe CLI to install the certificate on your server. For more information, see Install a TLS certificate on your server in the product documentation. For Citrix Hypervisor 8.2 and later, do not follow this article.To enable trusted TLS communication between Citrix Hypervisor and Citrix Virtual Apps and Desktops, a trusted certificate is required on the Citrix Hypervisor host. This article describes how to create a certificate using OpenSSL in combination with a Windows Certificate Authority that can be used with a XenServer 7.1 CU2 or XenServer 7.0 host
0 kommentar(er)
