Forum Discussion
Paul_Lueders
Altostratus
AltostratusF5 as a cert manager
At this time we have the certificates and keys installed on all the application servers and when we need to update the certs and keys we need to update them on each server and on the F5. Can I remov...
davidfisher
Cirrus
CirrusOne way I can think of is use SAN names and create just a single cert for the apps, even a wildcard option is available.
Then you can create a single client ssl profile with this cert and add to all the vips and only keep port 80 on the back end.
This is ssl offloading, client will come to bigip on ssl and bigip to servers will be without ssl.