Forum Discussion

aldrinstephengomes's avatar
aldrinstephengomes
Icon for Nimbostratus rankNimbostratus
Jun 25, 2023

Can I deployed a machine certificate in network load balancer?

Hi all, This is Aldrin Stephen Gomes form Bangladesh. I want to use a CA machine certificate in load balancer. Is it possible to use a machine certificate in load balancer...??? N/B: it will be CA m...
application delivery
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP

Hi aldrinstephengomes , 

Could you please give an example of this certificate , how is it or how it works. 

>> Also , Why do you want to deploy this kind of certificates ?

Thanks

aldrinstephengomes's avatar
aldrinstephengomes
Icon for Nimbostratus rankNimbostratus
Jun 25, 2023

Hi @Mohamed_Ahmed_Kansoh

Yes sure, that will be a certificate which will be generated from Trusted Certifying Authority & I want to deployed it in Load balancer hardware port. The machanism will be without privet key another component cannot communicate with load balancer. Hope ill get a solution...!!

Thanks

Aldrin Stephen Gomes

  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Icon for MVP rankMVP
    Jun 25, 2023

    aldrinstephengomes , 
    Do you mean the management Port of Loadbalancer , this port which you use it to manage your box and navigate F5 loadbalancer GUI , That's correct ? 

    • aldrinstephengomes's avatar
      aldrinstephengomes
      Icon for Nimbostratus rankNimbostratus
      Jun 25, 2023

      Mohamed_Ahmed_Kansoh 

      The prot I meaned I want to deployed a CA certificate in a entair Load balancer device. port will communicate with load balancer if load balancer have a Machine certificate then it will communicate with other components...!!!

      Regards

      Aldrin Stephen Gomes.

      • Mohamed_Ahmed_Kansoh's avatar
        Mohamed_Ahmed_Kansoh
        Icon for MVP rankMVP
        Jun 25, 2023

        aldrinstephengomes , 
        So you need to change the entire Loadbalancer device certificate. 

        Loadbalance use this certifiacte in multiple tasks , such as : 
        Accessing GUI of loadbalancer. 
        Exchange device certificates between 2 loadbalancer in DSC / HA Clustering.
        and more ... 

        So what I observe now you need to change the Loadbalancer certificate itslef by another CA certificate signed from CA. 
        and this will be Far from the ordinary ssl certificates of the Applications that hosted on loadbalancer. 

        So this doable : 
        Follow the below Articles : 

        https://my.f5.com/manage/s/article/K16951115#replace

        Or this : 

        https://my.f5.com/manage/s/article/K42531434#replace

        From the replace part. 

        Try it and let me know if I missed something