For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

T_Rajneesh's avatar
T_Rajneesh
Icon for Nimbostratus rankNimbostratus
Sep 23, 2020

can we have two SSL certificates attached to VIP - one is internal CA and other on is external CA

I have VIP which is configured to have ssl offloading on F5 VIP. I have multiple URL's accessing same VIP with different back end server. i.e., the request are being send to back end pool based host...
application delivery
BIG-IP
iRules
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Sep 23, 2020

Yes you can bind multiple client SSL profiles on same VIP and each client profile can have different certificates (public CA/internal). Just before binding multiple client SSL profiles on single VIP, you need to define one of the profile as a default/fallback SSL profile. You can define one of the client SSL profile as a default/fallback SSL by checking option Default SSL Profile for SNI under Client SSL profile advance settings.

With this, you should be good.