Export certificates used on a NetScaler appliance as PFX file

Last published : Sep 22, 2026
Related information

Prerequisites

You must have a working installation of the OpenSSL software and must be able to run OpenSSL from the command line interface.
Note: OpenSSL is also available from the NetScaler appliance shell prompt and GUI.

Export certificate using the CLI

To export certificates from the NetScaler appliance as a PFX file for use on another host, complete the following procedure:
  1. Obtain the relevant certificate and key file from the NetScaler appliance and place in a local directory of the workstation. All the certificate and key files are in the nsconfig/ssl directory.
    Certificates from a NetScaler appliance can be obtained using WinScp.
  2. Open the CLI and change the directory to the location of the OpenSSL executable (in <drive>:\openssl\bin by default).
  3. Type the following (PFX file type is used in this example):
C:\OpenSSL\bin>openssl pkcs12 -export -in <yourcertificatename.cer> -inkey <yourcertificatekey.key> -out <desiredfilename.pfx>Parameter description:

**yourcertifcatename.cer** - Certificate name present on the NetScaler appliance.

**yourcertificatekey** - Key associated with the certificate `yourcertificatename`.

**desiredfilename** - Name you want to assign to the PFX file.
  1. Type Export Password and enter the desired password for the PFX file. Reenter the export password to confirm the password.

Export certificate using the GUI

To export certificates from the NetScaler appliance as a PFX file for use on another host, complete the following procedure:
Obtain the relevant certificate and key file from the NetScaler appliance and place in a local directory of the workstation.
  1. Navigate to Traffic Management > SSL, under Tools section click Manage Certificates / Keys / CSRs link.
    CSR link
  2. Select the check box next to the certificate you want to download and click Download.
    Select certificate
  3. Navigate to Traffic Management > SSL > Export PKCS#12
    Export certificate
    In the PKCS12 field, choose the output file name for the PFX file.
    In the Certificate File Name field, choose the certificate file stored in the local disk.
    In the Key Filename field, choose the key file stored in the local disk.
    In the Export Password field, enter the export password and click OK.