Forum Discussion

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Aug 13, 2012

SSL certificate authentication

We have a customer with a requirement to enable SSL certificate based authentication to their web server. They have only one certificate that they would like to be able to authenticate with. We also...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Aug 13, 2012
If you need the web servers to receive the actual client certificate, you can look at the Proxy SSL feature added in 11.0.

 

 

Release Note: BIG-IP LTM and TMOS version 11.0.0

 

http://support.f5.com/kb/en-us/products/big-ip_ltm/releasenotes/product/relnote_11_0_0_ltm.html

 

 

Proxy SSL Support

 

 

This release provides Proxy SSL support in Client SSL and Server SSL profiles, which enables direct client-server authentication. You can find information about Proxy SSL in the Big-IP Local Traffic Manager: Implementations guide on AskF5. http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-1-0/15.html

 

 

sol13385: Overview of Proxy SSL feature

 

https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13385.html

 

 

Aaron