Export certificates used on a Citrix ADC appliance as PFX file

Prerequisites

You must have a working installation of the OpenSSL software and must be able to run OpenSSL from the command line interface.

Note: OpenSSL is also available from the Citrix ADC appliance shell prompt and GUI.

Export certificate using the CLI

To export certificates from the Citrix ADC appliance as a PFX file for use on another host, complete the following procedure:

1. Obtain the relevant certificate and key file from the Citrix ADC appliance and place in a local directory of the workstation. All the certificate and key files are in the nsconfig/ssl directory.

   Certificates from a Citrix ADC appliance can be obtained using WinScp.

2. Open the CLI and change the directory to the location of the OpenSSL executable (in <drive>:\openssl\bin by default).

3. Type the following (PFX file type is used in this example):

    C:\OpenSSL\bin>openssl pkcs12 -export -in <yourcertificatename.cer> -inkey <yourcertificatekey.key> -out <desiredfilename.pfx><!--NeedCopy-->

Parameter description:**yourcertifcatename.cer** - Certificate name present on the Citrix ADC appliance.**yourcertificatekey** - Key associated with the certificate `yourcertificatename`.**desiredfilename** - Name you want to assign to the PFX file.

1. Type Export Password and enter the desired password for the PFX file. Reenter the export password to confirm the password.

Export certificate using the GUI

To export certificates from the Citrix ADC appliance as a PFX file for use on another host, complete the following procedure:

Obtain the relevant certificate and key file from the Citrix ADC appliance and place in a local directory of the workstation.

1. Navigate to Traffic Management > SSL, under Tools section click Manage Certificates / Keys / CSRs link.

   

2. Select the check box next to the certificate you want to download and click Download.

   

3. Navigate to Traffic Management > SSL > Export PKCS#12

   

   In the PKCS12 field, choose the output file name for the PFX file.

   In the Certificate File Name field, choose the certificate file stored in the local disk.

   In the Key Filename field, choose the key file stored in the local disk.

   In the Export Password field, enter the export password and click OK.