For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

soymanue's avatar
soymanue
Icon for Nimbostratus rankNimbostratus
Sep 25, 2012

IOS Edge Client Machine Certificate

According to Edge Client for iOS documentation, only Client Certificate Authentication is allowed.   We asked our F5 contacts if Machine Certificate Authentication (which is supported by Cisco Any...
BIG-IP Access Policy Manager (APM)
remote access
security
ictjl's avatar
ictjl
Icon for Altocumulus rankAltocumulus
Nov 06, 2014

I'm bumping this thread since the initial post is very close to my question. I'm migrating my company iPad remote access from Cisco AnyConnect to F5 Edge Client (v2.0.4) for iOS. My 2FA solution requires the Edge Client to be in Web Logon mode. The iPad gets x.509 certificates (issued by the company CA) successfully from my MDM solution. I have enabled the "Use Certificate" option and selected my certificate in the Edge Client configuration. What I'm struggling with is how to configure the VPE to validate the certificate.

 

When I add the On-Demand Cert Auth action to the VPE I get "The server address provided is not valid."

 

Machine Cert Auth checks just fail. Those seem to be configured to access Windows machine cert stores anyway.

 

The goal is to confirm that an iPad has a certificate issued from my company CA a validate the cert with with a CA Root Chain cert.

 

Has anyone achieved this scenario?