Product Documentation
Application Delivery Management
14.1 - Current Release 13.1 13.0
View PDF

Use the SSL Dashboard

December 31, 2023
Contributed by: 
C

You can use the SSL certificate dashboard in Citrix Application Delivery Management (ADM) to view graphs that help you track certificate issuers, key strengths, and signature algorithms. The SSL certificate dashboard also displays graphs that indicate the following:

  • Number of days after which certificates expire

  • Number of used and unused certificates

  • Number of self-signed and CA-signed certificates

  • Number of issuers

  • Signature algorithms

  • SSL protocols

  • Top 10 instances by number of certificates in use

To monitor SSL certificates

You might use the SSL dashboard on Citrix ADM to monitor your certificates if your company has SSL Policy where you have defined certain SSL certificate requirements such as all certificates must have minimum key strengths of 2048 bits and a trusted CA authority must authorize it.

In another example, you might have uploaded a new certificate but forgotten to bind it to a virtual server. The SSL dashboard highlights the SSL certificates being used or not used. In the Usage section, you can see the number of certificates that have been installed, and the number of certificates being used. You can further click the graph, to see the certificates name, the instance on which it’s being used, its validity, its signature algorithm, and so on.

To monitor SSL certificates in Citrix ADM, navigate to Networks > SSL Dashboard.

SSL dashboard

Citrix ADM allows you to poll SSL Certificates and add all the SSL certificates of the instances immediately to Citrix ADM. To do so,

  1. Navigate to Networks > SSL Dashboard.

  2. Click Poll Now.

    On the Poll Now page, you can either poll all managed ADC instances or select specific instances.

  3. Click Start Polling.

In SSL Dashboard, you can monitor the ADC SSL certificates, SSL virtual servers, and SSL protocols.

You can click the metrics on the dashboard to view details related to SSL certificates, SSL Virtual Servers, or SSL protocols.

For example, when you click the number under Self signed vs CA signed on the dashboard, the ADM GUI displays all the SSL certificates on the Citrix ADC instances.

SSL certificates on ADC instances

The Citrix ADM SSL Dashboard also shows the distribution of SSL protocols that are running on your virtual servers. As an administrator, you can specify the protocols that you want to monitor through the SSL policy, for more information, see Configuring SSL Policies. The protocols supported are SSLv2, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2, and TLS 1.3. The SSL protocols used on virtual servers appear in a bar chart format. Clicking a specific protocol displays a list of virtual servers using that protocol.

A donut chart appears after Diffie-Hellman (DH) or Ephemeral RSA keys are enabled or disabled on the SSL dashboard. These keys enable secure communication with export clients even if the server certificate does not support export clients, as in the case of a 1024-bit certificate. Clicking the appropriate chart displays a list of the virtual servers on which DH or Ephemeral RSA keys are enabled.

To view audit trails for SSL certificates

You can now view log details of SSL certificates on Citrix ADM. The log details display operations performed using SSL certificates on Citrix ADM such as: installing SSL certificates, linking and unlinking SSL certificates, updating SSL certificates, and deleting SSL certificates. Audit trail information is useful while monitoring SSL certificate changes done on an application with multiple owners.

To view an audit log for a particular operation performed on Citrix ADM using SSL certificates, navigate to Networks > SSL Dashboard > and click Audit Logs.

Audit logs

For a particular operation performed using SSL certificate you can view its status, start time, and end time. Furthermore, you can view the instance on which the operation was performed and the commands run on that instance.

SSL audit trails

To exclude default Citrix ADC certificates on the SSL Dashboard

Citrix ADM allows you to show or hide default Citrix ADC certificates showing up on the SSL Dashboard charts based on your preferences. By default, all certificates are displayed on the SSL dashboard including default certificates.

To show or hide default certificates on the SSL dashboard:

  1. Navigate to Networks > SSL Dashboard in the Citrix ADM GUI.

  2. On SSL Dashboard page, click Settings.

  3. On the Settings page, select General.

  4. Type the number of days when the certificate expires to receive notification about certificate expiry.

  5. Select the method of notification and create the respective profiles.

  6. In the Certificate Filter section, clear the Show Default Certificates check box and click Save and Exit.

    Exclude default certificates

View, upload, and download SSL files

To view SSL files on Citrix ADM, navigate to Networks > SSL Dashboard > SSL Files on Citrix ADM.

In this page, you can view, upload, and download the following files on Citrix ADM:

  • SSL certificates
  • SSL keys
  • SSL CSRs

To view and download SSL files on a Citrix ADC instance, navigate to Networks > SSL Dashboard > SSL Files on Citrix ADC.

Important

To enable the SSL files download from ADC instances, enable the Instance SSL certificates feature. For more information, see Enable or disable ADM features.

Use the SSL Dashboard
December 31, 2023
Contributed by: 
C
December 31, 2023
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.