Hello Team, can we use internal CA certificates on...
# citrix-daasm
Melvin Sebastian
04/21/2026, 6:06 PMHello Team, can we use internal CA certificates on StoreFront and Cloud Connectors? With DigiCert certs now needing renewal every 6 months, it’s getting a bit challenging to manage.
We’d still plan to use DigiCert for XML services and StoreFront VIPs — just exploring if internal certs could be used for the rest.
m
Matt Sliva
04/21/2026, 6:48 PMI do. I have been for a few years now without issue.
Matt Sliva
04/21/2026, 6:50 PMThe thin clients trust the internal CA and thus the Storefront servers. The Storefront servers trust the internal CA cert binding on the Cloud Connectors. Citrix Cloud and the NetScaler Gateway Service doesn't care about the cert binding on the Cloud Connectors or the Storefront servers.
s
Srinivasan Shanmugam
04/21/2026, 8:15 PMDo you install intermediate and root CA certs on your thin clients for them to trust?
m
Matt Sliva
04/22/2026, 1:09 AMYes. Intermediate and root are installed to the thin clients.
k
kav_jack
04/28/2026, 5:57 AMCan you confirm without usung thin clients if all my external users using laptop and connecting through NetScaler and it load balances Storefront will internal cert works?
m
Matt Sliva
04/28/2026, 2:50 PMI don't have that configuration to test with and I imagine it won't work based upon prior experiences.
4 Views