Solved

Root Certificate, Client Certificate

Posted on 2013-12-17
6
543 Views
Last Modified: 2014-01-16
Hi Experts,

Trying to create SSL root certificate and client certificate for authentication.
Can you please send me the steps, your help will greatly help to solve the problems.
I have already tried the steps, but it did not work successfully.
Not sure what i am missing.
Root certificate will be installed in VPN appliance.
Client certificates will be installed in Laptops for those who want to connect VPN. (Not member of Domain)

Regards,
Skumar
0
Comment
Question by:Skumar_CCSA
  • 3
  • 3
6 Comments
 
LVL 36

Expert Comment

by:Mahesh
ID: 39725844
Some more information is required
What steps you have tried ?
Which VPN device you are using ?
You can have windows based Standalone CA server who can provide certificates to your VPN appliance and clients as well

Mahesh
0
 

Author Comment

by:Skumar_CCSA
ID: 39725862
HI Mahesh...

Appreciated your quick response.
F5 BIG-IP VPN Appliance.
Standalone CA server...provide Certificate to VPN Appliance (Root) and clients as well.
I have installed Certificate Authority services in standalone server..created Root Certificate.
Client certificate through IIS page, create request and choose client certificate and selected the Alg-sha1(Microsoft RSA) value.

Regards,
Skumar.
0
 
LVL 36

Expert Comment

by:Mahesh
ID: 39726054
Have you tried to generate CSR from F5 ?
http://www.digicert.com/csr-creation-f5-big-ip.htm
If CSR is generated, are you also able to generate certificate through Windows Certification Authority ?
In order to generate certificate through windows based CA, you need to open up windows CA through web interface. For ex: http://mycaserver/certsrv
For CA web interface, you must install CA web enrollment component on CA server as well.
If you have generated certificate successfully, are you able to import in F5 device ?

What exact problem you are facing please ?

Mahesh
0
Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

 

Author Comment

by:Skumar_CCSA
ID: 39727558
Hi Mahesh,

I have checked these option, but unfortunate this will not help.

I want to setup standalone CA for certificates.
Root Certificate will be placed in BIG-IP for client certificate sign and verification.
Client certificates will be created from the same standalone CA server, manually it be installed on the laptops those are not part of domain and who likely working from outside office. ( Assume they are clients and outside domain laptops).

I have installed Standalone CA.
Created Root Certificates and copied the same and placed in BIG-IP.
Created client certificate from the standalone CA server, installed on the laptop and i can see that installed client certificate located in Personal Certificates.
Assumed it will work, but it did not and looking for help.
Please help.....
Regards,
Skumar.
0
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39728385
Only creating root certificate will not help

Have you found any CSR generation wizard as per my earlier comment in F5?

You need to generate CSR from f5, submit that request to standalone CA, CA server will generate certificate with private key and that cert with private key need to be imported on F5

Hopefully then it should work

Mahesh
0
 

Author Closing Comment

by:Skumar_CCSA
ID: 39787511
thanks mahesh.,
problem solved after following various links..
however your sugg gr8ly helped to fix.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

OpenVPN is a great open source VPN server that is capable of providing quick and easy VPN access to your network on the cheap.  By default the software is configured to allow open access to your network.  But what if you want to restrict users to on…
How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question