Forum Discussion

Rabbit23_116296's avatar
Rabbit23_116296
Icon for Nimbostratus rankNimbostratus
May 08, 2014
Solved

F5 GTM iquery woes

have two stand-alone GTM devices in opposing DCs and struggling to get the sync-group up and running. is it OK to use the same wildcard certificate bound as a device certificate for the iquery commun...
BIG-IP DNS
  • mimlo_61970's avatar
    mimlo_61970
    May 09, 2014

    I had this same problem with certs from an internal CA. I figured out I had to load the CA certs under Global Traffic/Servers/Trusted Server Certificates. Putting them under Systtem/Device Certificates/Trusted Device Certificates was not enough. This was with 11.2.1

     

mimlo_61970's avatar
mimlo_61970
Icon for Cumulonimbus rankCumulonimbus
May 09, 2014

I had this same problem with certs from an internal CA. I figured out I had to load the CA certs under Global Traffic/Servers/Trusted Server Certificates. Putting them under Systtem/Device Certificates/Trusted Device Certificates was not enough. This was with 11.2.1

 

brice's avatar
brice
Icon for Nimbostratus rankNimbostratus
Feb 06, 2015
Wanted to point out that all levels in the certificate chain will be required. We had to import the cert, intermediate, and the root that signed them.