?
Solved

Root Certificate, Client Certificate

Posted on 2013-12-17
6
Medium Priority
?
571 Views
Last Modified: 2014-01-16
Hi Experts,

Trying to create SSL root certificate and client certificate for authentication.
Can you please send me the steps, your help will greatly help to solve the problems.
I have already tried the steps, but it did not work successfully.
Not sure what i am missing.
Root certificate will be installed in VPN appliance.
Client certificates will be installed in Laptops for those who want to connect VPN. (Not member of Domain)

Regards,
Skumar
0
Comment
Question by:Skumar_CCSA
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
6 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 39725844
Some more information is required
What steps you have tried ?
Which VPN device you are using ?
You can have windows based Standalone CA server who can provide certificates to your VPN appliance and clients as well

Mahesh
0
 

Author Comment

by:Skumar_CCSA
ID: 39725862
HI Mahesh...

Appreciated your quick response.
F5 BIG-IP VPN Appliance.
Standalone CA server...provide Certificate to VPN Appliance (Root) and clients as well.
I have installed Certificate Authority services in standalone server..created Root Certificate.
Client certificate through IIS page, create request and choose client certificate and selected the Alg-sha1(Microsoft RSA) value.

Regards,
Skumar.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39726054
Have you tried to generate CSR from F5 ?
http://www.digicert.com/csr-creation-f5-big-ip.htm
If CSR is generated, are you also able to generate certificate through Windows Certification Authority ?
In order to generate certificate through windows based CA, you need to open up windows CA through web interface. For ex: http://mycaserver/certsrv
For CA web interface, you must install CA web enrollment component on CA server as well.
If you have generated certificate successfully, are you able to import in F5 device ?

What exact problem you are facing please ?

Mahesh
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:Skumar_CCSA
ID: 39727558
Hi Mahesh,

I have checked these option, but unfortunate this will not help.

I want to setup standalone CA for certificates.
Root Certificate will be placed in BIG-IP for client certificate sign and verification.
Client certificates will be created from the same standalone CA server, manually it be installed on the laptops those are not part of domain and who likely working from outside office. ( Assume they are clients and outside domain laptops).

I have installed Standalone CA.
Created Root Certificates and copied the same and placed in BIG-IP.
Created client certificate from the standalone CA server, installed on the laptop and i can see that installed client certificate located in Personal Certificates.
Assumed it will work, but it did not and looking for help.
Please help.....
Regards,
Skumar.
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 1500 total points
ID: 39728385
Only creating root certificate will not help

Have you found any CSR generation wizard as per my earlier comment in F5?

You need to generate CSR from f5, submit that request to standalone CA, CA server will generate certificate with private key and that cert with private key need to be imported on F5

Hopefully then it should work

Mahesh
0
 

Author Closing Comment

by:Skumar_CCSA
ID: 39787511
thanks mahesh.,
problem solved after following various links..
however your sugg gr8ly helped to fix.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses
Course of the Month9 days, 8 hours left to enroll

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question