Once I created a CSR and got it signed by my CA I was ready with the files I needed, namely
- A PFX file (private key which is used to decrypt SSL traffic on the Netscaler)
- CA bunlde (files which are used to encrypt traffic and for clients to decide whether to trust their connection to me)
When importing the files onto the Netscaler, I kept getting the following error message.
Quick Google search reveals an old CTX article.
The resolution is to export the private key to a new file on the shell of the Netscaler. This didn't really satisfy my curiosity as to why this error was occurring.
After a bit more Googling I found the following CTX.
This article explains that you can manually import the PFX file, but in a format that the Netscaler will be able to use.
Once this task was completed, adding the certificate bundle to this PFX file worked perfectly.