For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

don_23889's avatar
don_23889
Icon for Nimbostratus rankNimbostratus
Apr 16, 2015

I have a similiar issue, but am failing to understand how to apply to the on_demand policy macro.

 

The apm end point (vip) is configured with a Verisign certificate + client ssl profile. However, the on_demand certificate authority does not appear to relate to a client ssl profile.

 

The issue for me, is when remote clients have n+1 "user" identification certificates, and specifically on windows-7. Is there a way to 'inform' the on_demand macro which certificate to use?

 

amolari's avatar
amolari
Icon for Cirrostratus rankCirrostratus
Apr 16, 2015
on-demand will use the certificate (+crl) you define in the client SSL profile (where you should not anymore enable Request / Require)