Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Will_Adams_1995's avatar
Will_Adams_1995
Icon for Nimbostratus rankNimbostratus
Oct 18, 2015

Client authentication random failure - 11.6 HF4

We have a pair of BIG IP 6900 appliances that work as an active/passive HA pair. Recently we have upgraded the appliances to 11.6 HF4 (we were on 11.3 HF10) and have been having issues with our clie...
BIG-IP Access Policy Manager (APM)
design
management
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 18, 2015

What have you done to troubleshoot cert auth?

 

  1. Removed the CRL check?

     

  2. Enable debug logging for SSL?

     

  3. Enable debug logging for APM?

     

  4. Are you doing cert auth in the client SSL profile or APM on-demand cert auth?

     

  5. Are you extracting any information from the cert before launching the VPN? If so, what and do you know if that's working?