Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Will_Adams_1995's avatar
Will_Adams_1995
Icon for Nimbostratus rankNimbostratus
Oct 18, 2015

Client authentication random failure - 11.6 HF4

We have a pair of BIG IP 6900 appliances that work as an active/passive HA pair. Recently we have upgraded the appliances to 11.6 HF4 (we were on 11.3 HF10) and have been having issues with our clie...
BIG-IP Access Policy Manager (APM)
design
management
security
Will_Adams_1995's avatar
Will_Adams_1995
Icon for Nimbostratus rankNimbostratus
Oct 18, 2015

Actually I got an alternate user to try and login via a Windows 8 machine.

 

On my session I have the following certificates expiring

 

"USERID" Expires 18/10/2016; 2/08/2016; 13/10/2016; 01/09/2016

 

"USERID2"

 

Expires 12/10/2016; 11/06/2016; 14/10/2016

 

With the loan device, USERID (me) works fine. I noticed that my certificate subject says "user_fqdn". This is without the CRL enabled.

 

With the load device, USERID2 breaks. I noticed that it does fail and there is no certificate subject. Hence this process goes to the fallback path and goes to the logon page option.