1Y0-253 · Question #197
In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?
The correct answer is C. /nsconfig/ssl. See the full explanation below for the reasoning.
Question
In which directory can a Citrix Administrator locate the SSL certificates, certificate keys and root CA files?
Options
- A/var/nslog
- B/var/ns_gui
- C/nsconfig/ssl
- D/var/netscaler
How the community answered
(57 responses)- A7% (4)
- B4% (2)
- C74% (42)
- D16% (9)
Community Discussion
4The answer is C, /nsconfig/ssl, because that is the dedicated directory on a Citrix ADC appliance where the system stores SSL certificates, private keys, and root CA files, which is also where you would point when binding a certificate to a virtual server.
My eye went straight to /var/netscaler because I kept thinking of it as the main storage area, but once I remembered that /nsconfig is where NetScaler persists its configuration across reboots, including certs and keys, /nsconfig/ssl clicked immediately as the only one that made sense.
/nsconfig/ssl is the right answer. That is the standard persistent directory on a NetScaler/ADC where SSL certificates, private keys, and root CA files are stored, and it survives reboots because /nsconfig is the configuration partition that persists across restarts, unlike /var paths which are more transient.
Right, and just to add onto that, the files being in /nsconfig/ssl is only half the story because you still need to run "save ns config" so the actual cert-to-vserver bindings get written into ns.conf, otherwise the cert files survive the reboot but the virtual server loses its binding.