For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DannyG_34437's avatar
DannyG_34437
Icon for Cirrus rankCirrus
Mar 12, 2014

Is edge client required to check for cert on IOS mobile device?

Hi, I have an LTM/APM environment. I am currently trying to setup authentication certificate checks to mobile IOS devices. If I use the edge client and vpn tunnels, all works just fine (cert checking and access). I am running the IBM content navigator app on the device and would like to connect direct using straight SSL without using the edge client. Is it possible to check the certificate on the IOS device without using the edge client?

 

Thanks, dg

 

BIG-IP Access Policy Manager (APM)
security

2 Replies

  • DannyG_34437's avatar
    DannyG_34437
    Icon for Cirrus rankCirrus
    Mar 13, 2014
    Ok, What I am seeing is if one connects using safari, then the certificate checks work just fine. However, If I try to connect to the VS using the APP, certificates are not checked. I think it's something to do with how Apple allows the certificate checking only through Safari or approved apps such as the F5 Edge Client. Can anyone confirm? Regards, Danny
  • gbbaus_104974's avatar
    gbbaus_104974
    Historic F5 Account
    Mar 27, 2014

    Hi

     

    Yes, it is up to the App to be able to leverage the certificate within the IOS certificate store on the device.

     

    As you saw, Safari makes use of the cert. As you point out, the F5 EdgeClient can also use the cert.

     

    Other Apps like the email ActiveSync client that is in iOS can also call on the cert.

     

    So basically the App needs to have the logic to use the cert store.