Create Certificate
netscaler.create_certificate
ActionBusiness appsconnection required
Calls the NetScaler ADC API with the connection's credentials.
Bind an uploaded certificate file and private-key file into a new pair.
Connection
- Required
- Yes — the node will not save without one
- Auth type
- Custom
- Providers
- NetScaler ADC
- Secret shape
- {"username": "…", "password": "…"} — or {"sessionid": "…"}
- Config it needs
- base_url
- Resolved by
- config.connection_id, else node.connection_id
Configuration
8 fields, 3 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.
| Field | Type | Required | Default | Constraints | Example |
|---|---|---|---|---|---|
certkey The name of the certificate-and-key pair on the appliance, as 'show ssl certKey' lists it. | string | Yes | — | — | wildcard-acme-2026 |
cert The certificate file's name on the appliance, optionally with a path; upload it first. | string | Yes | — | — | wildcard-acme-2026.crt |
key The private-key file's name on the appliance, optionally with a path; upload it first. | string | Yes | — | — | wildcard-acme-2026.key |
inform The format the certificate and key files are in; NetScaler defaults to PEM. | string | No | — | one of "PEM", "DER" | — |
expirymonitor Whether the appliance should raise an alert as the certificate nears expiry. | string | No | — | one of "ENABLED", "DISABLED" | — |
notificationperiod How many days before expiry the alert fires; NetScaler allows 10 to 100. | number | Conditional | — | 10–100; only with expirymonitor | 30 |
bundle Whether to parse the certificate file as a whole chain in one file. | string | No | — | one of "NO", "YES" | — |
linkcertkeyname The name of the CA pair to link this certificate to, building the chain. | string | No | — | — | acme-intermediate-ca |
Example configuration
Every value below is the contract’s own example or default — nothing invented.
{
"cert": "wildcard-acme-2026.crt",
"certkey": "wildcard-acme-2026",
"key": "wildcard-acme-2026.key",
"linkcertkeyname": "acme-intermediate-ca",
"notificationperiod": 30
}Output
One shape.
result
| Field | Type | Example |
|---|---|---|
created True once the appliance accepted the pair. | boolean | — |
certkey The name the pair was created under. | string | — |
{
"certkey": "",
"created": false
}Notes
- cert and key name files that are already on the appliance — run netscaler.upload_file first.
- The change is in the running config only until netscaler.save_config runs.
See Create Certificate run in a workflow.
In a technical demo we add the NetScaler ADC connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.