For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ronnietheengine's avatar
ronnietheengine
Icon for Nimbostratus rankNimbostratus
Mar 31, 2017

SAN Certificate Troubleshooting

Hello,   I have a SAN Certificate and installed to BIG IP TL2000.The certificate was imported as pfx but i also tried to convert and installed as .pem file to BIG IP. The problem is i can not use...
application delivery
BIG-IP
san
security
Chase_Abbott's avatar
Chase_Abbott
Icon for Admin rankAdmin
Mar 31, 2017

This shouldn't be an issue. If the cert is SAN/Wildcard it can work fine within a single client ssl profile. You can choose how to segregate the traffic:

 

  1. 3 separate virtual servers using the same client ssl prof
  2. 1 virtual with 3 DNS A records pointing to it. Use an iRule to segregate the sites and pools with a switch statement.

The PFX should import the cert/key just fine. I would import the intermediary certificate separately for cert chain linking.