Issue with Citrix NetScaler Firmware Version 14.1-29.63: Certificate Import Error

Citrix NetScaler customers using firmware version 14.1-29.63 are encountering an issue when attempting to import certificates with key sizes larger than RSA512 or DSA512 bits. This is causing an error message:

“Certificate with key size greater than RSA512 or DSA512 bits not supported.”

This problem occurs when customers try to import certificates with 2048-bit or 4096-bit key sizes, which are widely used for secure communication.

Resolution: Upgrade to Firmware Version 14.1-29.65

Citrix has addressed this issue in firmware version 14.1-29.65, which removes the limitation on certificate key sizes. After upgrading to this version, users can import certificates with key sizes of 2048 and 4096 bits without encountering any errors.

To upgrade, follow these steps:

1. Log in to the Citrix portal.
2. Navigate to Resources → Downloads → NetScaler.
3. Click on the link for Citrix ADC VPX Release 14.1.
4. Scroll down and locate the Citrix ADC Upgrade Package-14.1-29.65 (for VPX Express users only).
5. Click Download File to download the firmware version 14.1-29.65.
6. Use the downloaded file to upgrade your ADC from version 14.1-29.63 to 14.1-29.65.
7. After the upgrade, import your certificate files again. The error should no longer occur.

As an exciting bonus, Citrix introduced a free Platinum license edition for up to 20 Mbps with the release of version 14.1-29.63! This incredible offer allows users to unlock premium features and enhanced performance at no additional cost—making it the perfect opportunity to explore all that Citrix NetScaler has to offer.