Forum Discussion

kridsana_52318's avatar
kridsana_52318
Icon for Nimbostratus rankNimbostratus
Sep 30, 2013

How can I make BIG-IP device that using self sign certificate "trust" in my organize or just my computer?

Hi

 

How can I make BIG-IP device that using self sign certificate "trust" in my organize or just my computer?

 

I think I seen SOL long time ago but I can't find it now.

 

Thank you

 

APM
cloud
deployment
design
management
security
vmware

2 Replies

Sort By
  • StephanManthey's avatar
    StephanManthey
    Icon for MVP rankMVP
    Sep 30, 2013

    To trust a certificate it needs to fulfill the following criterias:

     

    1. requested hostname needs to match the common name (CN) in the certificate
    2. the certificate needs still to be valid (not expired)
    3. the certificate needs to be signed by a trusted certificate authority (CA)

    If the certificate is self signed it might be possible to import it into your webbrowser to avoid the related error messages. But the CN and expiration date need to fit.

     

    There is an option to craft a certificate signing request (CSR), to be exported and signed by a corporate certficate authority. The signed certificate can be imported. Due to trust to your corporate CA the browser should now accept the cert (see topic 3).