Product Documentation
ADC
14.1 - Current Release 13.1 13.0 12.1
View PDF

Client certificate authentication using advanced policies

September 14, 2021
Contributed by: 
S

Following are the steps to configure client certificate authentication on Citrix ADC using advanced policies.

  1. Navigate to Security > AAA - Application Traffic > Virtual Servers.

  2. In the details pane, select the virtual server that you want to configure to handle client certificate authentication, and click Edit.

    Note:

    If you have imported a valid CA certificate and server certificate for the virtual server you can skip step 3 to step 10.

  3. On the Configuration page, under Certificates, click > to open the CA Cert Key installation dialog box.
  4. In the CA Cert Key dialog box, click Insert.
  5. In the CA Cert Key - SSL Certificates dialog box, click Install.

  6. In the Install Certificate dialog box, set the following parameters, whose names correspond to the CLI parameter names as shown:

    • Certificate-Key Pair Name—certkeyName
    • Certificate File Name—certFile
    • Key File Name—keyFile
    • Certificate Format—inform
    • Password—password
    • Certificate Bundle—bundle
    • Notify When Expires—expiryMonitor
    • Notification Period—notificationPeriod
  7. Click Install, and then click Close.
  8. In the CA Cert Key dialog box, from the Certificate list, select the root certificate.
  9. Click Save.
  10. Click Back to return to the main configuration screen.
  11. Navigate to Security > AAA - Application Traffic > Policies > Authentication > Advanced Policies, and then select Policy.

  12. In the details pane do one of the following:

    • To create a new policy, click Add.
    • To modify an existing policy, select the policy, and then click Edit.

  13. In the Create Authentication Policy or Configure Authentication Policy dialog box, type or select values for the parameters.

    • Name - The policy name. Cannot be changed for a previously configured policy.
    • Action Type - Select Cert
    • Action - The authentication action (profile) to associate with the policy. You can choose an existing authentication action, or click the plus and create a new action of the proper type.
    • Log Action - The audit action to associate with the policy. You can choose an existing audit action, or click the plus and create a new action.
    • Expression - The rule that selects connections to which you want to apply the action that you specified. The rule can be simple (“true” selects all traffic) or complex. You enter expressions by first choosing the type of expression in the leftmost drop-down list beneath the Expression window, and then by typing your expression directly into the expression text area, or by clicking Add to open Add Expression dialog box and using the drop-down lists in it to construct your expression.)
    • Comment - You can type a comment that describes the type of traffic that this authentication policy will apply to. Optional.
  14. Click Create or OK, and then click Close. If you created a policy, that policy appears in the Authentication Policies and Servers page.
Client certificate authentication using advanced policies
September 14, 2021
Contributed by: 
S
September 14, 2021
Contributed by: 
S

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.