Forum Discussion

ronnietheengine's avatar
ronnietheengine
Icon for Nimbostratus rankNimbostratus
Mar 31, 2017

SAN Certificate Troubleshooting

Hello,   I have a SAN Certificate and installed to BIG IP TL2000.The certificate was imported as pfx but i also tried to convert and installed as .pem file to BIG IP. The problem is i can not use...
application delivery
BIG-IP
san
security
Chase_Abbott's avatar
Chase_Abbott
Icon for Employee rankEmployee
Mar 31, 2017

This shouldn't be an issue. If the cert is SAN/Wildcard it can work fine within a single client ssl profile. You can choose how to segregate the traffic:

 

  1. 3 separate virtual servers using the same client ssl prof
  2. 1 virtual with 3 DNS A records pointing to it. Use an iRule to segregate the sites and pools with a switch statement.

The PFX should import the cert/key just fine. I would import the intermediary certificate separately for cert chain linking.