Forum Discussion

Ben_Thornton_10's avatar
Ben_Thornton_10
Icon for Nimbostratus rankNimbostratus
Nov 05, 2015

APM: selecting clientssl profile based on client certificate

Hi All,   I am using a self signed CA to provide client authentication for APM.   We have recently swapped to a new CA and need to retire the old CA.   The issue I have is that in order to ...
BIG-IP Access Policy Manager (APM)
deployment
design
security
Renato's avatar
Renato
Icon for Altostratus rankAltostratus
Nov 05, 2015

You can concatenate both the CA bundles in a single file and use it as your trusted/advertised CA. Doing it the ssl profile will authenticate certificates issued by both the CAs.