SSL Certificate on F5 VIP and Real

It's under the server cert section on the server SSL profile. If you change Server Certificate from the default of 'ignore' to 'require', LTM will check the start and end dates of the cert and not complete a handshake for an invalid cert. You can also configure a name to look for in the common name field of the server cert. If you want LTM to check the client cert issuer, you can configure a trusted CA cert bundle in the server SSL profile.

 

 

Aaron