Question for the group. Can I ditch annual renewals of ssl certs on our vpx and switch over to tls for a permanent thing? i dont know much about this stuff at all, but when it comes times for cert renewals every years from ssls.com i always cringe as i'm not very good at updating the vpx, but manage to get thru it with a ton of notes i refer too

No you need to renew. You can use auto renew with Letsencrypt or similar but there are requirements.

If you use NetScaler Console look into the zero touch feature. You renew the certs on the ADM, NetScalers pull them from it. And there are some neat automation features coming in the future for it.

@jvitech I havent been able to find info on using LE for netscalers, is it supported?

I use Let's Encrypt all the time. And I have it automated with powershell and scheduled tasks. https://www.jeffriechers.com/wiki/automated-lets-encrypt-netscaler-certificate-update-process/

I also use LetsEncrypt, and it's great. I've been using @John Billekens script. It will also put the cert on Storefront - j81blog/GenLeCertForNS: This script helps you to create a Let's Encrypt certificate for your NetScaler

Thank you @Ryan Gallier, indeed with this PowerShell script you can automate the whole procedure. Let me know if you need some help. I'm also almost finished implementing the use of NetScaler DNS that can help in DNS validation situations.

@John Billekens I was wondering where the dependency on .NET Framework comes from?

is a Posh-ACME requirement Home - Posh-ACME Requirements and Platform Support¶ • Supports Windows PowerShell 5.1 (Desktop edition) with .NET Framework 4.7.1 or later • Supports PowerShell 6.2 or later (Core edition) on all supported OS platforms. • Requires

FullLanguage

language mode