Forum Discussion

Soap_111722's avatar
Soap_111722
Icon for Nimbostratus rankNimbostratus
Mar 25, 2015

Cert Auth - Serial Number

When trying to setup a check for a cert via APM I get an error that my SN is invalid when trying to save. I have tried several different formats(spaces, no spaces, : , etc) Has anyone run into this b...
BIG-IP Access Policy Manager (APM)
design
security
Seth_Cooper's avatar
Seth_Cooper
Icon for Employee rankEmployee
Mar 25, 2015

It looks like the online help needs to be updated regarding what this box is requiring. The best bet to get the serial number is to do a "sessiondump -allkeys | grep " while the session is active and see what the serial number appears to be in the session variables.

 

From my testing you cannot have any spaces and all letters need to be uppercase. The certificate on my client looks like this "16 68 93 2f 00 00 00 00 00 06" but the session variable looks like this after the APM validates the certificate "1668932F000000000006". As you can see it removed the spaces and made the F uppercase.

 

I would suggest trying the cert serial number as shown above and hopefully that will fix the issue. I would also suggest opening a support case to have the documentation updated. You can reference this devcentral post when opening the case.

 

Regards,

 

Seth