What is the first item a Citrix Administrator should create when creating a Server Certificate for NetScaler to secure traffic?

• A. A Certificate key-pair
• B. A Private Key
• C. A Certificate Signing Request
• D. A Certificate Revocation list

Answer: (B)

The first step is to generate the private key. In TLS, the private key stays on the NetScaler and is the secret counterpart to the public key that will go into the server certificate. You need this private key to create the Certificate Signing Request (CSR), which is then sent to the CA to issue the certificate. Without a private key, you can’t form a CSR or establish TLS traffic, so generating the private key comes first.

Creating a certificate key-pair happens after you have the private key, since the pair comprises the private key and the public key embedded in the certificate. The CSR is produced from that private key, and the Certificate Revocation List is used later to manage revocation, not as part of the initial certificate creation.