Which action should be taken to ensure clients trust the HTTPS certificate chain used by the Citrix ADC (including intermediate and root certificates)?

Which action should be taken to ensure clients trust the HTTPS certificate chain used by the Citrix ADC (including intermediate and root certificates)?

• A. Install intermediate and root certificates on the ADC.
• B. Install only the server certificate on the ADC.
• C. Import only the root certificate.
• D. Import only the intermediate certificate.

Answer: (A)

Establishing trust for an HTTPS connection requires presenting the full certificate chain that links the server’s certificate to a trusted root CA. The Citrix ADC must be configured with all necessary chain links so clients can validate the certificate back to a root they already trust. Installing both intermediate certificates and the root certificate on the ADC ensures the server can present a complete chain to every client, preventing trust errors during the TLS handshake. If only the server certificate is installed, the chain may be incomplete and clients cannot verify it against a trusted root. Importing just the root or just the intermediate certificates leaves gaps in the chain, which can cause browsers or clients to flag the certificate as untrusted. By providing the full chain on the ADC, you maximize compatibility and reliability across diverse client trust stores.

Establishing trust for an HTTPS connection requires presenting the full certificate chain that links the server’s certificate to a trusted root CA. The Citrix ADC must be configured with all necessary chain links so clients can validate the certificate back to a root they already trust. Installing both intermediate certificates and the root certificate on the ADC ensures the server can present a complete chain to every client, preventing trust errors during the TLS handshake.

If only the server certificate is installed, the chain may be incomplete and clients cannot verify it against a trusted root. Importing just the root or just the intermediate certificates leaves gaps in the chain, which can cause browsers or clients to flag the certificate as untrusted. By providing the full chain on the ADC, you maximize compatibility and reliability across diverse client trust stores.