Application Delivery Management

Set up notifications for SSL certificate expiry

March 11, 2024

Contributed by:

R C

As a security administrator, you can set up notifications to inform you when certificates are about to expire and to include information about which Citrix Application Delivery Controller (ADC) instances use those certificates. By enabling notifications, you can renew your SSL certificates on time.

For example, you can set an email notification to be sent an email distribution list 30 days before your certificate is due to expire.

To set up notifications from NetScaler ADM:

In NetScaler Application Delivery Management (ADM), navigate to Infrastructure > SSL Dashboard.
On the SSL Dashboard page, click Settings.
On the SSL Settings page, click the Edit icon .
In the Notification Settings section, specify when you want to send the notification in terms of number of days prior to the expiration date.
Choose the type of notification you want to send. Select the notification type and the distribution list from the drop-down menu. The notification types are as follows:
- Email – Specify a mail server and profile details. An email is triggered when your certificates are about to expire.
- SMS – Specify a Short Message Service (SMS) server and profile details. An SMS message is triggered when your certificates are about to expire.
- Slack - Specify Slack profile details.
- PagerDuty alerts - Specify a PagerDuty profile. Based on the notification settings configured in your PagerDuty portal, a notification is sent when your certificates are about to expire.
- ServiceNow - A notification is sent to the default ServiceNow profile when your certificates are about to expire.
  
  Important
  
  Ensure Citrix Cloud ITSM Adapter is configured for ServiceNow and integrated with NetScaler ADM. For more information, see Integrate NetScaler ADM with ServiceNow instance.
Click Save and Exit.

NetScaler ADM now sends SSL certificate expiry trap to external trap destination server when your SSL certificates are due for expiry. NetScaler ADM sends a trap when the following two conditions are satisfied:

You have configured the number of days for the certificate expire in SSL dashboard settings page.
You have added the trap destination.

You can set trap destinations by navigating to Settings > SNMP > Trap Destinations. Type the IP address of the destination SNMP server where the traps are sent. Enter the port number and type “public” (without quotes) as the community string.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Set up notifications for SSL certificate expiry

March 11, 2024

Contributed by:

R C

March 11, 2024

Contributed by:

R C

Set up notifications for SSL certificate expiry

In this article