Forum Discussion
bylie
Nimbostratus
NimbostratusF5 BIG-IP SSLVPN client using machine certs and renewal of the issuing intermediate CA
Hello,
We use the F5 BIG-IP SSLVPN client in combination with machine certificates which are handed out by our internal MS PKI. Our internal PKI consists of a root CA and an intermediate CA, the...
bylieNimbostratus
NimbostratusA snapshot of the relevant APM VPE flow and the properties of the Machine Cert Auth check:
The CA profile currently points to a certificate bundle consisting of our root CA and current intermediate CA. As stated in the opening post we would like to know if it's possible to add a new intermediate CA to this bundle to accomplish simultaneous verification of machine certs issued by our current intermediate CA and future machine certs issued by a new intermediate CA?
