Citrix Access Gateway SSL installation is done using the Administration Tool.
A pre-built .pem file should have been emailed to you when your certificate was issued.
- Once you have located or created the your_domain_name.pem file, you will want to rename it to have a .crt extension (as opposed to a .pem extension).
-
Then, from the "Access Gateway Cluster" tab, open the window for the appliance.
-
In the "Administration Tool," go to the "Access Gateway Cluster".
-
Under "Administration," select select "Browse" next to "Upload a .crt signed certificate."
-
Browse to your your_domain_name.crt file from step one and click "Open."
You can alternately install the certificate file through the "Administration Portal" by clicking "Maintenance," "Add a signed certificate (.crt)," and then browsing to the your_domain_name.crt file.
Your SSL certificate installation is now complete.
According to Citrix support, you should be using version 4.5.1 or newer. Older versions have compatibility issues with intermediate certificates.