Forum Discussion
aldrinstephengomes
Nimbostratus
NimbostratusCan I deployed a machine certificate in network load balancer?
Hi all, This is Aldrin Stephen Gomes form Bangladesh. I want to use a CA machine certificate in load balancer. Is it possible to use a machine certificate in load balancer...??? N/B: it will be CA m...
aldrinstephengomesNimbostratus
NimbostratusHi @Mohamed_Ahmed_Kansoh
Yes sure, that will be a certificate which will be generated from Trusted Certifying Authority & I want to deployed it in Load balancer hardware port. The machanism will be without privet key another component cannot communicate with load balancer. Hope ill get a solution...!!
Thanks
Aldrin Stephen Gomes
aldrinstephengomes ,
Do you mean the management Port of Loadbalancer , this port which you use it to manage your box and navigate F5 loadbalancer GUI , That's correct ?
- aldrinstephengomes
The prot I meaned I want to deployed a CA certificate in a entair Load balancer device. port will communicate with load balancer if load balancer have a Machine certificate then it will communicate with other components...!!!
Regards
Aldrin Stephen Gomes.
aldrinstephengomes ,
So you need to change the entire Loadbalancer device certificate.
Loadbalance use this certifiacte in multiple tasks , such as :
Accessing GUI of loadbalancer.
Exchange device certificates between 2 loadbalancer in DSC / HA Clustering.
and more ...
So what I observe now you need to change the Loadbalancer certificate itslef by another CA certificate signed from CA.
and this will be Far from the ordinary ssl certificates of the Applications that hosted on loadbalancer.
So this doable :
Follow the below Articles :
https://my.f5.com/manage/s/article/K16951115#replace
Or this :
https://my.f5.com/manage/s/article/K42531434#replace
From the replace part.
Try it and let me know if I missed something- Paulius
MVP
aldrinstephengomes Can you provide a bit more information on exactly where you intend to install this SSL certificate? Based on the back and forth I see between yourself and Mohamed_Ahmed_Kansoh it seems like you want to replace the SSL certificate associated to the management GUI. If you generate an SSL certificate you will also have to have the associated SSL key uploaded to the device for it to work properly.
