SSL client certificate LDAP authentication creating visual policy editor in APM

Hello,

You should add a client ssl profile to your VS. This profile should have the Client Authentication section completed at least with :

• require
• CA trusted
• CA Advertised

Then, you create a VPE with :

start -> Client Cert Inspection -> (optional) CRLDP/OCSP Auth -> Logon page -> LDAP Auth -> Allow

You need an LDAP AAA object configured.

Don't sure if I understand correctly the LDAP authenication need. If you talk about CRL checking using LDAP, then you need to configure a CRLDP AAA object

start -> Client Cert Inspection -> CRLDP Auth -> Allow