For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Oct 23, 2012

Edge Client Internal Certificate Authentication

Hello   Is it possible to make the BIG-IP work as an Internal CA to issue user certificates that we would use for user authentication with APM and Edge client?    
BIG-IP Access Policy Manager (APM)
remote access
security
soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Oct 24, 2012
We're talking about a couple of hundred certificates. Now we are using an external CA (Windows 2003). The problem is that APM does not support Machine Certificates. Issuing user certificates with Microsoft CA is quite complicated. The own user must connect to the website, fill the form, and connect later to download the certificate. Then, he must send the certificate to his own email accout in order to install it on his iPhone/iPad. It the user is the company's CEO, it doesn't look the best way to do it.

 

We also have CheckPoint FW-1, which has Remote Access and can issue self-signed certificates that are quite easier to generate.