LTM SSL Profiles issue

Tamer,

In brief, to terminate the SSL connection you will need a Client SSL Profile configured and applied to the Virtual Server. If you need to re-encrypt to the backend webserver then you would also need a Server SSL Profile configured and applied to the Virtual Server (note, most times the default serverssl profile will work fine).

You will need to export the cert/key from the existing web server, import onto the BIG-IP and associate with the new Client SSL Profile.

Client certificate Authentication will require the Trusted CA certificate configured on the BIG-IP, perhaps a Root or Intermediate CA cert. Normally this would be from an internal PKI. You just configure the Client SSL profile to accept client certs signed from a particular Trusted Authority.

See the following links for more granular help:

Managing SSL certificates for BIG-IP systems using the Configuration utility

Overview of the Client SSL profile

Hope this helps,

N

Hi Nathan,

Thanks for your support

So I will import the certificate.pfx file and create SSL client profile only OK that is fine

and for Client certificate Authentication I will add in addition to the above certificate.pfx I will add the Trusted CA certificate Root or Intermediate CA cert.

I will try then and will keep you updated.

One more thing: each website should has a Trusted CA certificate - root CA or not ? should I create a root CA for each website ?

Thanks for your help

OK Thanks I will do that and will update you

Hi Nathan,

Thanks so much for your support

It worked

I created a SSL client profile using the certficate.pfx , and created SSL server profile using the default serverssl profile.

Many thanks to you