Forum Discussion

Niklas_Ahl_6703's avatar
Niklas_Ahl_6703
Icon for Nimbostratus rankNimbostratus
Dec 27, 2010

Device certificate from intermediate CA

Hi!     I would like to add a trusted device certificate to our LTM and use it for the management interface.   We have our own CA that we issue certificates from, which is an intermediate CA...
config
design
StephanManthey's avatar
StephanManthey
Icon for MVP rankMVP
Mar 27, 2017

Hi,

here is a way to get it done in TMOS v11+.

Copy the chain file (single intermediate CA file or bundle in PEM format) as 
intermediate_ca.crt
to the 
/config/httpd/conf/ssl.crt/
directory and set permissions, i.e.: 
chmod 0644 /config/httpd/conf/ssl.crt/intermediate_ca.crt

Now declare it to be used as chain file to be delivered along with the device certificate during the initial handshake and restart the WebUI: 

tmsh modify / sys httpd ssl-certchainfile /etc/httpd/conf/ssl.crt/intermediate_ca.crt
bigstart restart httpd

Thanks, Stephan