Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Dec 28, 2011

F5 Edge Client with Internal CA

Hello   Currently we are using F5 Edge Client with just AD authentication in the APM.   We want to add the client certificate authentication but it doesn't work.   How can I debug the certifi...
BIG-IP Access Policy Manager (APM)
remote access
security
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Apr 13, 2012
Hi Manuel,

 

 

In the VPE do you have a check for a Windows Machine Certificate? Also you need to add the CA cert to your BigIP device... when the VPE checks the client cert it will see if it has been issued by your CA cert (which you install on the BigIP under "system" - "file managment" - "SSL Certificate List"). If you have to create a cert bundle you need to install it on the command line.

 

 

Hope this helps.

 

 

Seth