Andre Combrinck

Hi Nico, You may already know that to bind the SSL Profile, you need to use the resource argument: resource "citrixadc_sslvserver" "gateway_ssl_vserver" { vservername = "myGateway" sslprofile = "ns_default_ssl_profile_secure_frontend" } However, before you can use this argument, you first need to enable the SSL Parameter, Default Profile. resource "citrixadc_sslparameter" "default" { defaultprofile = "ENABLED" } Enabling Default Profile is a one-way action and will affect all the SSL vServers on the NetScaler. This will result in all of the SSL vServers using ns_default_ssl_profile_secure_frontend. You can then use Terraform to change them to a new custom profile.

For Native OTP, the user needs to scan a QR code or enter a given code into their authenticator app. This is a manual process that involves the Gateway and the user's phone. This does not lend itself to automation.