Citrix NetScaler
Connects the CLM to Citrix NetScaler via the NITRO REST API for discovery and deployment of certificates.
Uses of this integration
| Feature | Supported |
|---|---|
| Discovery of SSL certkeys | ✅ |
| Deploy of certificates to Virtual Servers | ✅ |
| Deploy to SSL Services | ✅ |
| Deploy to SSL Service Groups | ✅ |
| Deploy to Content Switching (CS) Virtual Servers | ✅ |
| Certificate issuance | ❌ |
Prerequisites
Linux CLM Agent installed and online with network access to NetScaler. The agent is what makes the NITRO REST calls to NetScaler — the CLM never connects directly.
User on NetScaler with the following minimum permissions:
| Permission | Purpose |
|---|---|
sslpolicy — read/write | Manage SSL certkeys and bindings |
lbvserver — read | List Virtual Servers for discovery |
csvserver — read | List Content Switching Virtual Servers |
sslservice — read/write | Manage SSL Services |
sslservicegroup — read/write | Manage SSL Service Groups |
Linux Agent required
See the [Install the Agent — Linux](/guias/agente/linux) guide to install and configure the agent before registering this integration.
Register
- Go to Integrations in the sidebar menu
- Find the NetScaler card and click + Configure
- Fill in the fields:
| Field | Description |
|---|---|
| Name | Name to identify the integration, e.g. Netscaler-Production |
| Host (NSIP / Mgmt IP) | NetScaler management IP, e.g. 10.66.32.104 |
| Port | NITRO API port (default: 443) |
| User | User with SSL management permissions |
| Password | Leave blank to keep the current password when editing |
| Linux Agent | Agent that will make the calls to the NetScaler API |
| Allow self-signed certificates | Enable if NetScaler uses internal TLS with a self-signed certificate |
- Click Test connection to validate and then Update
Edit
Click the ⋮ menu on the integration card and select Edit. Leave the password blank to keep it unchanged.
Delete
Remove the linked Stores and discovery jobs before deleting the integration.