Virtual server with server side profile : Do I need a cert on the backend servers?

Hi,

In your VIP if you assign a ssl server profile that's mean that your backend servers use a ssl certificate. When you set a ssl server, you tell F5 that the server backend has an SSL certificate and therefore it is necessary to communicate with your backend by using the SSL / TLS protocol.

F5 explanation: The BIG-IP Server SSL profile enables the BIG-IP system to initiate secure connections to your SSL servers by using a fully SSL-encapsulated protocol and providing configurable settings for managing server-side SSL connections.

And to answer to your question, If you set a ssl server on your VS you must have a certificate on your backend otherwise it will not work. And vice versa if you do not have a SSL profile n your VS, your backend server must not have a certificate (ie use the TLS / SSL protocol).

regards,