Developer Documentation
ADC CLI Commands
Current Release 13.1 13.0 12.1

ssl-zerotouchparam

July 17, 2026
Contributed by: 
C

The following operations can be performed on “ssl-zerotouchparam”:

set unset show

set ssl zerotouchparam

Synopsis

set ssl zerotouchparam [-ocspCacheTimeout <positive_integer>] [-ocspBatchingDepth <positive_integer>] [-ocspBatchingDelay <positive_integer>] [-ocspResptimeout <positive_integer>] [-ocspUrlResolveTimeout ] \[-ocspTrustResponder \( YES | NO )] \[-ocspProducedAtTimeSkew <positive\_integer>] \[-ocspUseNonce \( ENABLED | DISABLED )] \[-ocspHttpMethod \( GET | POST )]

Arguments

ocspCacheTimeout Timeout(in minutes) for caching the OCSP response. Default value: 1 Minimum value: 1 Maximum value: 43200

ocspBatchingDepth Number of certificates to batch together into one OCSP request. Batching avoids overloading the OCSP responder. A value of 1 signifies that each request is queried independently. For a value greater than 1, specify a timeout (batching delay) to avoid inordinately delaying the processing of a single certificate. Minimum value: 1 Maximum value: 8

ocspBatchingDelay Maximum time, in milliseconds, to wait to accumulate OCSP requests to batch. Does not apply if the Batching Depth is 1. Minimum value: 1 Maximum value: 10000

ocspResptimeout Time, in milliseconds, to wait for an OCSP response. When this time elapses, an error message appears or the transaction is forwarded, depending on the settings on the virtual server. Includes Batching Delay time. Minimum value: 100 Maximum value: 120000

ocspUrlResolveTimeout Time, in milliseconds, to wait for an OCSP URL Resolution. When this time elapses, an error message appears or the transaction is forwarded, depending on the settings on the virtual server. Minimum value: 100 Maximum value: 2000

ocspTrustResponder If trustResponder is set to YES, signature verification will be skipped for the OCSP response

Possible values: YES, NO

ocspProducedAtTimeSkew Time, in seconds, for which the Citrix ADC waits before considering the response as invalid. The response is considered invalid if the Produced At time stamp in the OCSP response exceeds or precedes the current Citrix ADC clock time by the amount of time specified. Default value: 300 Minimum value: 0 Maximum value: 86400

ocspUseNonce Enable the OCSP nonce extension, which is designed to prevent replay attacks.

Possible values: ENABLED, DISABLED Default value: ENABLED

ocspHttpMethod HTTP method used to send ocsp request. POST is the default httpmethod. If request length is > 255, POST wil be used even if GET is set as httpMethod

Possible values: GET, POST Default value: POST

unset ssl zerotouchparam

Use this command to remove ssl zerotouchparam settings.Refer to the set ssl zerotouchparam command for meanings of the arguments.

Synopsis

unset ssl zerotouchparam [-ocspCacheTimeout] [-ocspBatchingDepth] [-ocspBatchingDelay] [-ocspResptimeout] [-ocspUrlResolveTimeout] [-ocspTrustResponder] [-ocspProducedAtTimeSkew] [-ocspUseNonce] [-ocspHttpMethod]

show ssl zerotouchparam

Synopsis

show ssl zerotouchparam

Arguments

Output

zeroTouch Flag to enable or disable the zero touch certificate management.

remoteServerIp Certfetcher daemon connects to this IP to fetch certificates and keys.

keyfileName Name of the private key file which ADM creates on NetScaler while enabling zero touch certificate management.

passPhrase Password to the private key file.

admConnectivityStatus Status of the request sent by the certfetcher daemon to the remote server.

httpStatusCode Status code received by the certfetcher daemon from the remote server.

requestType Type of the request sent by the certfetcher daemon to the remote server.

requestTimeStamp Timestamp at which request was sent by the certfetcher daemon to the remote server.

nextRequestTime Timestamp at which next polling request will be sent by the certfetcher daemon to the remote server.

ocspCacheTimeout Timeout(in minutes) for caching the OCSP response.

ocspBatchingDepth Number of certificates to batch together into one OCSP request. Batching avoids overloading the OCSP responder. A value of 1 signifies that each request is queried independently. For a value greater than 1, specify a timeout (batching delay) to avoid inordinately delaying the processing of a single certificate.

ocspBatchingDelay Maximum time, in milliseconds, to wait to accumulate OCSP requests to batch. Does not apply if the Batching Depth is 1.

ocspResptimeout Time, in milliseconds, to wait for an OCSP response. When this time elapses, an error message appears or the transaction is forwarded, depending on the settings on the virtual server. Includes Batching Delay time.

ocspUrlResolveTimeout Time, in milliseconds, to wait for an OCSP URL Resolution. When this time elapses, an error message appears or the transaction is forwarded, depending on the settings on the virtual server.

ocspTrustResponder If trustResponder is set to YES, signature verification will be skipped for the OCSP response

ocspProducedAtTimeSkew Time, in seconds, for which the Citrix ADC waits before considering the response as invalid. The response is considered invalid if the Produced At time stamp in the OCSP response exceeds or precedes the current Citrix ADC clock time by the amount of time specified.

ocspUseNonce Enable the OCSP nonce extension, which is designed to prevent replay attacks.

ocspHttpMethod HTTP method used to send ocsp request. POST is the default httpmethod. If request length is > 255, POST wil be used even if GET is set as httpMethod

_nextgenAPIResource

ssl-zerotouchparam
July 17, 2026
Contributed by: 
C
July 17, 2026
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.