Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

DC_Jordan_18536's avatar
DC_Jordan_18536
Icon for Nimbostratus rankNimbostratus
Sep 01, 2015

SSL offload - pfx certificate

I import pfx certifcate in f5 and it is included certificate and key , when associate this certifcate ((client ssl)) site is not working (when i removed from virtual server under client ssl , site is...
application delivery
ASM Advanced WAF
LTM
security
DC_Jordan_18536's avatar
DC_Jordan_18536
Icon for Nimbostratus rankNimbostratus
Sep 01, 2015

I want to thank you for your support .

 

So i need just to add default server profile that used in f5 is that right ?!?

 

From server side i do not need to remove certficate is that right?!?

 

I have question , when i asked ststem admin to downlad certificate from (symantec) , he choose f5 as server and symantec provide us two cert (x.cert and intermediate CA)this make me be confused?!??

 

But i entered on MMC (windows) and i export certificate with private key in x.pfx , is that good procedure?!?

 

  • Brad_Parker's avatar
    Brad_Parker
    Icon for Cirrus rankCirrus
    Sep 01, 2015
    yes, default serverssl profile will work. Do not remove the cert from the server. Yes, you can export the pfx from the mmc, but I would recommend including the chain by checking "Include all certificates in the certification path if possible" when exporting.