Please let me know if you have any issues or if there are any corrections. $continue = Read-Host 'Would you like to Continue? Y/N' Write-Host 'If there is already a bound SSL certificate, it must be expiring within the next 60 days or expired for this to work' The new one and the one you want to replace (due to expire)' Write-Host 'You should only have two certificates in your personal store. Write-Host 'Please make sure that you've imported a valid server SSL certificate on your Controller/Broker server. Write-Host 'This script should be run on the delivery controller to bind your imported SSL Certificate to the Citrix Broker Service' At the command prompt, type: ctxcertmgr -import identifier -filename filename -format format -keyfilename key-filename -dbpassword db-password -filepassword file-password install ssl citrix. Log on as the root user at the Secure Gateway server. # SSL Cert Update for Citrix Broker Service # To install a server certificate not requested using ctxcertreq. NOTE: You will need to 'RunAs' administrator in PowerShell in order to be able to bind the certificates. It can also replace the binding of an old certificate with a new one if your certificate is either expired or about to expire within the next 60 days. It can bind a valid certificate that matches the server hostname if not yet bound. The following script can be run from the Delivery Controller once the new Certificate is imported into the computer's Personal store to quickly bind it to the Citrix Broker Service on port 443 applying to all the local IPv4 addresses of the server. So I decided to make a simple PowerShell script that can do the binding for you once you have a new certificate imported on your Delivery Controller's personal store all ready to go. However, once you have this set up, there will be a need to re-bind a renewed SSL server Certificate to the Citrix Broker Service before the certificate is about to expire. Here are some of the links I used for this article: Setting it up for VirtualApps and VitualDesktops 7.x for the first time can be done by following CTX130213 article for XenDesktop 5. Citrix has a guide on how to create/bind your SSL Server Certificate to the Citrix Broker Service in order to secure your communication between Storefront and your Delivery Controllers.

Citrix ssl certificate install