Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Mar 14, 2015

DSC and trust creation

Hi,   Probably trivial and not so important but I am not so good is SSL stuff and still curious how it works.   Before creating HA we have two (or more) Standalone LTMs (ltm_A and ltm_B). Each ...
application delivery
LTM
security
TMOS
nitass's avatar
nitass
Icon for Employee rankEmployee
Mar 14, 2015

is sol13946 useful?

When the local BIG-IP device attempts to join a device trust with a remote BIG-IP device, the following applies:
   ◦If the local BIG-IP device is added as a peer authority device, the remote BIG-IP device presents a certificate signing request (CSR) to the local device, which then signs the CSR and returns the certificate along with its CA certificate and key.
   ◦If the local BIG-IP device is added as a subordinate (non-authority) device, the remote BIG-IP device presents a CSR to the local device, which then signs the CSR and returns the certificate. The CA certificate and key are not presented to the remote BIG-IP device. The subordinate device is unable to request other devices to join the device trust.

sol13946: Troubleshooting ConfigSync and device service clustering issues (11.x)

https://support.f5.com/kb/en-us/solutions/public/13000/900/sol13946.html