Implementing SSL Orchestrator - Guided Configuration

Introduction This article is part of a series on implementing BIG-IP SSL Orchestrator. It includes high availability and central management with BIG-IQ. Implementing SSL/TLS Decryption is not a tr...
Published Jan 10, 2020
Version 1.0
BIG-IP
decryption
guided configuration
security
series-big-ip-ssl-orchestrator
service chain
SSL Orchestrator
topology
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jan 28, 2020

Hi,

Just to verify if I understood it correctly: Notes: The difference between the Cert Key Chain and the CA Cert Key Chain:

So process of creating forget certificates looks like that:

  1. Key installed using Certificate Key Chain is used to generate CSR with copy of data from original site certyficate
  2. Key installed via CA Certificate Key Chain is used to sign CSR

If above is true key set via Certificate Key Chain can be used to control type and size of key used to create forget certificate - Am I right?

Piotr