Format Using a PEM Certificate for UAG

When uploading certificates for your Horizon Universal Gateway (UAG) with PEM, you must use a particular PEM formatting method, regardless of your Edge capacity provider type.

The option to specify a certificate type of PEM appears in the Gateway VMs section for the Certificate Type field.

PEM full chain formatting is required. A PEM full chain file is a text file that contains the entire SSL/TLS certificate trust chain, allowing web servers to send the domain's public certificate along with all the necessary intermediate certificates to a client's browser, to ensure a secure connection.

When using PEM certificates for the Horizon Universal Access Gateway (UAG), the PEM file format must left-align as shown below.

Note: You must use an ending line for one certificate before starting a new line for the next certificate. Each MIID entry shown below is the first four characters of the Base64-encoded string, which indicates the length and data structure of the certificate.

-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIID....
-----END CERTIFICATE-----
-----BEGIN PRIVATE KEY-----
MIIE....
-----END PRIVATE KEY-----

Notepad++ method

In Notepad++, use the following command sequence:

Edit → EOL Conversion → Unix (LF)

PowerShell method

In PowerShell, use the following command format:

[System.IO.File]::WriteAllText("C:\path\to\cert-name-fixed.pem", [System.IO.File]::ReadAllText("C:\path\to\cert-name.pem").Replace("`r`n","`n"))