Setting Client Certificate Authentication on F5 BigIP

Question

Hi all,&nbsp;
Currently we are using a SharePoint 2013 farm with 3 Web Front End servers load-balanced with BigIP.
The customer wants to configure client certificate authentication (require) to enhance the security of the SharePoint Farm. So we are thinking about setting the certificate authentication on Big IP.&nbsp;
Since we do not know much with BigIP configuration, so is there anyone can help us to accomplish this?
Any helps would be great appreciated.&nbsp;

ilian_ivanov · Answer

Hi,&nbsp;
You can check that articles:&nbsp;
https://devcentral.f5.com/articles/ssl-profiles-part-8-client-authentication&nbsp;
https://devcentral.f5.com/questions/client-authentication-with-certificate&nbsp;
Regards&nbsp;

p_k · Answer

you may try using an APM policy with 'client cert inspection' agent in it. Do you have any authentication setup after client cert is validated?&nbsp;

nam_truong_3245 · Answer

Yes, we want to use both client cert authentication (validate first) and then username/password to authenticate users.&nbsp;

Forum Discussion

Setting Client Certificate Authentication on F5 BigIP

3 Replies

Recent Discussions

Pricing when used with aws waf

F5 Rseries R2600 Tenant sizing

iRule help masking IBM host URL/URI

Need advise to setup a policy on F5

Advise on setting up IRULE

Related Content

F5 BIG-IP Access Policy Manager (APM) - Google Authenticator and Microsoft Authenticator

APM Clientless certificate authentication

BIG-IQ Client Certificate (PKI) Authentication

Doing mTLS Authentication per URL

Re: Management Certificate