> ## Documentation Index
> Fetch the complete documentation index at: https://infisical.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# NetScaler connection

> Learn how to configure a NetScaler Connection for Infisical.

Infisical supports connecting to Citrix NetScaler (ADC) appliances using basic authentication credentials for managing SSL certificates via the NITRO REST API.

## Setup

> [tab] Infisical UI
>
> **1. Gather NetScaler Credentials**
>
> You'll need the following from your NetScaler appliance:
>
> * **Hostname**: The management IP address or FQDN of your NetScaler appliance (e.g., `192.168.1.100` or `netscaler.example.com`).
>
> * **Port**: The HTTPS management port (default: `443`).
>
> * **Username**: A user with administrative access to manage SSL certificates (e.g., `nsroot`).
>
> * **Password**: The password for the user account.
>
> > [!NOTE]
> >
> > The user account must have permissions to:
> >
> > * Upload files to `/nsconfig/ssl/`
> > * Create and manage `sslcertkey` objects
> > * Bind certificates to SSL virtual servers (if vServer binding is used)
> > * Save the running configuration
>
> **2. Navigate to App Connections**
>
> In Certificate Manager, go to **Settings** > **App Connections** and select **Add Connection**.
>
> ![App Connections Tab](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/general/add-connection.png)
>
> **3. Select NetScaler**
>
> Select the **NetScaler** option from the list of available connections.
>
> ![Select NetScaler Connection](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/netscaler/select-netscaler-connection.png)
>
> **4. Fill in Connection Details**
>
> Fill in the **Configuration** tab:
>
> * **Hostname**: The management IP or FQDN of the NetScaler appliance.
> * **Username**: The NetScaler management username.
> * **Password**: The password for the management user.
> * **Port** (Optional): HTTPS port for the management interface (default: `443`).
>
> Configure the **SSL** tab:
>
> * **SSL Certificate** (Optional): A CA certificate in PEM format to verify the NetScaler management interface's TLS certificate.
> * **Reject Unauthorized**: When enabled, Infisical will only connect if the NetScaler has a valid, trusted TLS certificate. Disable for self-signed certificates or provide a CA certificate.
>
> Optionally select a **Gateway** to route the connection through an Infisical Gateway for private network access.
>
> ![NetScaler Connection Form](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/netscaler/netscaler-connection-form.png)
>
> Click **Connect to NetScaler** to validate and save your connection.
>
> **5. Connection Created**
>
> Your NetScaler Connection is now available for use with certificate syncs.
>
> ![NetScaler Connection Created](https://mintlify.s3.us-west-1.amazonaws.com/infisical/images/app-connections/netscaler/netscaler-connection-created.png)

> [tab] API
>
> To create a NetScaler Connection, make an API request to the [Create App Connection](https://infisical.com/docs/api-reference/endpoints/app-connections/netscaler/create.md) endpoint.
>
> ### Sample request
>
> ```bash Request theme={"dark"}
> curl --request POST \
>   --url https://app.infisical.com/api/v1/app-connections/netscaler \
>   --header 'Authorization: Bearer <access-token>' \
>   --header 'Content-Type: application/json' \
>   --data '{
>     "name": "my-netscaler-connection",
>     "method": "basic-auth",
>     "credentials": {
>       "hostname": "netscaler.example.com",
>       "port": 443,
>       "username": "nsroot",
>       "password": "your-password",
>       "sslRejectUnauthorized": false
>     }
>   }'
> ```
>
> ### Sample response
>
> ```json Response theme={"dark"}
> {
>   "appConnection": {
>     "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
>     "name": "my-netscaler-connection",
>     "app": "netscaler",
>     "method": "basic-auth",
>     "credentials": {
>       "hostname": "netscaler.example.com",
>       "port": 443,
>       "username": "nsroot",
>       "sslRejectUnauthorized": false
>     }
>   }
> }
> ```


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.