Update Certificate
netscaler.update_certificate
ActionBusiness appsconnection required
Calls the NetScaler ADC API with the connection's credentials.
Replace the certificate and key files behind an existing pair.
Connection
- Required
- Yes — the node will not save without one
- Auth type
- Custom
- Providers
- NetScaler ADC
- Secret shape
- {"username": "…", "password": "…"} — or {"sessionid": "…"}
- Config it needs
- base_url
- Resolved by
- config.connection_id, else node.connection_id
Configuration
5 fields, 3 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.
| Field | Type | Required | Default | Constraints | Example |
|---|---|---|---|---|---|
certkey The name of the certificate-and-key pair on the appliance, as 'show ssl certKey' lists it. | string | Yes | — | — | wildcard-acme-2026 |
cert The certificate file's name on the appliance, optionally with a path; upload it first. | string | Yes | — | — | wildcard-acme-2026.crt |
key The private-key file's name on the appliance, optionally with a path; upload it first. | string | Yes | — | — | wildcard-acme-2026.key |
inform The format the certificate and key files are in; NetScaler defaults to PEM. | string | No | — | one of "PEM", "DER" | — |
nodomaincheck Skip the check that the new certificate's domain matches the old one. | boolean | No | false | — | — |
Example configuration
Every value below is the contract’s own example or default — nothing invented.
{
"cert": "wildcard-acme-2026.crt",
"certkey": "wildcard-acme-2026",
"key": "wildcard-acme-2026.key",
"nodomaincheck": false
}Output
One shape.
result
| Field | Type | Example |
|---|---|---|
updated True once the appliance accepted the new files. | boolean | — |
certkey The pair that was updated. | string | — |
{
"certkey": "",
"updated": false
}Notes
- This is the renewal step: upload the new files, update the pair, then save.
See Update Certificate run in a workflow.
In a technical demo we add the NetScaler ADC connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.