For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jun 27, 2014

That's not what I'm saying. Your LTM VIP needs the client SSL profile (set to ignore) and the APM access policy. The access policy needs, basically:

Start -> On-Demand Cert Auth Agent -> Allow

You can add things after the ODCA, but the above is a minimal configuration. Do not use the Client Cert Inspection agent in the VPE.

If that doesn't work, remove the ODCA and set client SSL to request/require instead. Again, do not use the Client Cert Inspection agent. The client certificate values will still be available to the access session.