Forum Discussion

bylie's avatar
bylie
Icon for Nimbostratus rankNimbostratus
Jun 14, 2018

F5 BIG-IP SSLVPN client using machine certs and renewal of the issuing intermediate CA

Hello,   We use the F5 BIG-IP SSLVPN client in combination with machine certificates which are handed out by our internal MS PKI. Our internal PKI consists of a root CA and an intermediate CA, the...
BIG-IP Access Policy Manager (APM)
security
bylie's avatar
bylie
Icon for Nimbostratus rankNimbostratus
Jun 18, 2018

Any reason why the bundle has to have the root CA certificate twice? Can't the chaining also not work if the bundle contains:

 

  • root CA
    • current intermediate CA
    • new intermediate CA