Forum Discussion

som_86408's avatar
som_86408
Icon for Nimbostratus rankNimbostratus
Jun 30, 2018

Self sign certificate at the back end server

Hi,   At the back end server, we are using self sig certificate, and the communication between f5 to back end server should be secure. So do I need to import root certificate to trust the certific...
BIG-IP
LTM
security
Surgeon's avatar
Surgeon
Ret. Employee
Jun 30, 2018

On the server side, big-ip is acting as a client. You can answer yourself for "Do I need to install the same certificate and key files in f5 and have to map to the vip"

 

Answer this question 1st: do yo install server's cert and key to your browser or you just navigte to e.g.

 

After that you will be able to answer your 1st question.

 

As for "I need to install the root certificate of the certificate in f5 if yes then what config I have to do in server ssl profile?"

 

Do you want to use server authentication option? If not then no need to install any root CA certs. If yes, then use next article to know more about Server SSL profile

 

K14806: Overview of the Server SSL profile (11.x - 13.x)