Citrix XenMobile v10 SSL Offload

A quick description regarding SSL Offload in Citrix XenMobile V9 and Citrix XenMobile v10

Robin Hobo and Anton van Pelt have already published great guides on how to install and configure XenMobile v10. I would like to contribute with my own experience and will explain the differences between Citrix XenMobile v9 and v10 regarding the SSL Offload Part.
Some time ago Citrix published a CTX Article about SSL Offload in Citrix XenMobile v9. In Citrix XenMobile v10 and Citrix NetScaler v10.5 the process is basically the same. Some menu items have been replaced which I want to show you.
Step 1 in CTX200063 Article is to gather the Devices Certificate and also the Root Certificate. Since Citrix moved both parts into one appliance you can´t access the file system. But you will find the certificate under Configure -> Settings -> Certificate.

Citrix XenMobile v10 SSL Offload

Citrix XenMobile v10 SSL Offload

You will have to export the cacerts.pem Certificate and download it to your computer. If you open the file with your favorite text editor you will see that it contains both certificates which are mentioned in the CTX Article. You can follow the Citrix guide’s instructions to the end if you are using a version of NetScaler below 10.5. If you are using 10.5, you can follow the CTX Article up to step 8 where you bind your device and Root Ca to your Load Balancer (Groß?). This option is named slightly different.

Citrix XenMobile v10 SSL Offload

Citrix XenMobile v10 SSL Offload

Citrix XenMobile v10 SSL Offload

Citrix XenMobile v10 SSL Offload


On those Screenshots you can see where you have to bind both Certificates to your Load Balancer.

Leave a Reply

Your email address will not be published.

By continuing to use the site, you agree to the use of cookies. More information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

Close