Product Documentation
Application Delivery Management
14.1 - Current Release 13.1 13.0 12.1
View PDF

Manage database custom certificates and ciphers in a high-availability deployment

February 9, 2024
Contributed by: 
R C

NetScaler Console allows you to replace the default inbuilt database certificates with your own certificates from a trusted certificate authority. You can also configure your own cipher suites in the NetScaler Console database. This feature provides greater flexibility and security for your certificate management needs, and secures all communication between your HA nodes with trusted SSL certificates.

Install your database certificates on NetScaler Console

To install your certificates in an HA setup:

  1. Navigate to Settings > HA Deployment and click Database Certificates.
  2. Click the Installed Certificate tab and click Install New Certificate.
  3. In the Install Database Certificate on Application Delivery Management page, upload a root certificate, server certificate, and server key. You can do one of the following:
    • Choose File > Local to upload a certificate or key file from your local machine.
    • Choose File > Appliance to upload a certificate or key file that is present on NetScaler Console.
  4. Click Install.

Install database certificate

Note:

If there are multiple chain certificates, you must combine them into a single file. Make sure that the order of concatenation is correct, with the intermediate certificates first, followed by the root certificate. This order is essential for the certificate chain to be recognized correctly.

For example, the following command appends the content of each certificate file (intermediate_certificate1.crt, intermediate_certificate2.crt, and root_certificate.crt) to the file named combined_certs.crt:

cat intermediate_certificate1.crt >> combined_certs.crt

cat intermediate_certificate2.crt >> combined_certs.crt

cat root_certificate.crt >> combined_certs.crt

Manage your installed database certificates

To view, download, and delete your installed certificates:

  1. Navigate to Settings > HA Deployment and click Database Certificates.
  2. Click the Certificate Files tab and select Root Certificates, Server Certificates, or Server Keys to see the corresponding files.
  3. To download a file to your local machine, click Download.
  4. To delete a certificate file, select the file and click Delete. In the confirmation dialog box that appears, click OK.

Manage database certificate

Configure database cipher suites

To configure cipher suites for an HA deployment:

  1. Navigate to Settings > HA Deployment and click Database Certificates.
  2. Click the Ciphers tab and then click Configure Cipher.
  3. In the Configure Cipher Suites page, select one or more ciphers from the available list of ciphers.
  4. Click Configure. In the confirmation dialog box that appears, click Yes to change the cipher settings.

Configure ciphers

Note:

Changing the cipher settings restarts the NetScaler Console secondary and disaster recovery nodes.

Manage database custom certificates and ciphers in a high-availability deployment
February 9, 2024
Contributed by: 
R C
February 9, 2024
Contributed by: 
R C

In this article

Site feedback | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.