Forum Discussion

MoredhelAus_361's avatar
MoredhelAus_361
Icon for Nimbostratus rankNimbostratus
Jun 27, 2018

Client Certificate Inspection on SSL VPN

I have a request to set up an SSL VPN on the F5 which requires that only devices with machine certificates are allowed to connect.   I have set up the VPN and it works fine without certificate ins...
APM
certificate authentication
LTM
security
ssl
vpn
I_R_101_110's avatar
I_R_101_110
Icon for Cirrus rankCirrus
Jun 29, 2018

As you hinted, it's all in the one client ssl profile.

 

The option to specify the trusted ca for the client cert is in the client ssl profile under Client Authentication->Trusted Certificate Authorities. This is done in the same client ssl profile that you're serving the DigiCert certificate with. There is no need to associate another client ssl profile with the virtual server.