Forum Discussion

bylie's avatar
bylie
Icon for Nimbostratus rankNimbostratus
Jun 14, 2018

F5 BIG-IP SSLVPN client using machine certs and renewal of the issuing intermediate CA

Hello,   We use the F5 BIG-IP SSLVPN client in combination with machine certificates which are handed out by our internal MS PKI. Our internal PKI consists of a root CA and an intermediate CA, the...
BIG-IP Access Policy Manager (APM)
security
bylie's avatar
bylie
Icon for Nimbostratus rankNimbostratus
Jun 15, 2018

Just to make sure I understand this correctly. What we currently have in our CA bundle:

 

  • root CA
    • current intermediate CA

We would like to issue a new intermediate CA which conceptually would look like this:

 

  • root CA
    • current intermediate CA
    • new intermediate CA

If I understand correctly what you're suggesting is to have the CA bundle looking like this:

 

  • root CA
    • current intermediate CA
  • root CA
    • new intermediate CA

Is this correct?