Format Using a PEM Certificate for UAG

When uploading certificates for your Horizon Universal Gateway (UAG) with PEM, you must use a particular PEM formatting method, regardless of your Edge capacity provider type.

The option to specify a certificate type of PEM appears in the Gateway VMs section for the Certificate Type field.

PEM full chain formatting is required. A PEM full chain file is a text file that contains the entire SSL/TLS certificate trust chain, allowing web servers to send the domain's public certificate along with all the necessary intermediate certificates to a client's browser, to ensure a secure connection.

You must ensure that your PEM certs use LF (Line Feed) for new lines instead of CRLF (Carriage Return Line Feed).

When using PEM certificates for the Horizon Universal Access Gateway, the PEM file format must left-align exactly as shown below.

Note: You must use an ending line for one certificate before starting a new line for the next certificate. Each MIID entry shown below is the first four characters of the Base64-encoded string, which indicates the length and data structure of the certificate.

-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
MIIE....
-----END PRIVATE KEY-----

To ensure that your PEM certificates are using LF (Line Feed) for new lines instead of CRLF (Carriage Return Line Feed), you can use a Notepad++ or PowerShell method, as shown below.

Notepad++ method

In Notepad++, use the following command sequence:

Edit → EOL Conversion → Unix (LF)

PowerShell method

In PowerShell, use the following command format:

[System.IO.File]::WriteAllText("C:\path\to\cert-name-fixed.pem", [System.IO.File]::ReadAllText("C:\path\to\cert-name.pem").Replace("`r`n","`n"))