picture of tbs certificates
picture of tbs certificates
Our products range

Generate a CSR for Citrix Access Essentials

We advise you to use Thawte Standard products on this kind of platform. TBS X509 certificates are not compatible with version 12 Citrix client or Citrix Receiver.

To generate a first CSR on Citrix Access Essentials (CAE):
  1. Launch the "Quick Start" tool
  2. In the "Set up" tab, click on "External Access" 
    then click on "Manage External Access" 
    Click Next.
  3. Select "Direct to this server" to access the server from the Internet.
    Click Next.
  4. If you do not have any certificate, follow the instructions
    if you do have a certificate STOP there or you will overwrite the existing certificate. Then follow the renewal instructions.
  5. CN: Enter the public FQDN of the server (example:
    Of course, this DNS has to be working!
    Click Next.
  6. O: Enter the official name of your organization
  7. OU: We advise not to fill in this field or to enter a generic term such as "IT Department".
    Click Next.
  8. Enter the geographical information of your organization headquarters:
    L: The city, in uppercase
    ST: The state, in uppercase
    C: The 2 letter code of your country, FR for France
    Click Next.
  9. Select "Manually submit the certificate request to a Certificate Authority"
    and click Next.
  10. Indicate the name and the path to the temporary CSR file.
    Click Next.
  11. Click Finish to generate the file.
  12. Open the file in a notepad and copy/paste its content in our order form.
  13. See Access an order form

See the official guide as well (pages 43 and 44 of the PDF): Citrix Access Essentials Administrator's Guide
French version: Guide de l'administrateur Citrix Access Essentials

N.B.: with some older version you won't be able to generate your CSR from a 2048-bit RSA key (limited to 1024-bit). In that case follow the procedure here.