Solved

Root Certificate, Client Certificate

Posted on 2013-12-17
6
540 Views
Last Modified: 2014-01-16
Hi Experts,

Trying to create SSL root certificate and client certificate for authentication.
Can you please send me the steps, your help will greatly help to solve the problems.
I have already tried the steps, but it did not work successfully.
Not sure what i am missing.
Root certificate will be installed in VPN appliance.
Client certificates will be installed in Laptops for those who want to connect VPN. (Not member of Domain)

Regards,
Skumar
0
Comment
Question by:Skumar_CCSA
  • 3
  • 3
6 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 39725844
Some more information is required
What steps you have tried ?
Which VPN device you are using ?
You can have windows based Standalone CA server who can provide certificates to your VPN appliance and clients as well

Mahesh
0
 

Author Comment

by:Skumar_CCSA
ID: 39725862
HI Mahesh...

Appreciated your quick response.
F5 BIG-IP VPN Appliance.
Standalone CA server...provide Certificate to VPN Appliance (Root) and clients as well.
I have installed Certificate Authority services in standalone server..created Root Certificate.
Client certificate through IIS page, create request and choose client certificate and selected the Alg-sha1(Microsoft RSA) value.

Regards,
Skumar.
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39726054
Have you tried to generate CSR from F5 ?
http://www.digicert.com/csr-creation-f5-big-ip.htm
If CSR is generated, are you also able to generate certificate through Windows Certification Authority ?
In order to generate certificate through windows based CA, you need to open up windows CA through web interface. For ex: http://mycaserver/certsrv
For CA web interface, you must install CA web enrollment component on CA server as well.
If you have generated certificate successfully, are you able to import in F5 device ?

What exact problem you are facing please ?

Mahesh
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 

Author Comment

by:Skumar_CCSA
ID: 39727558
Hi Mahesh,

I have checked these option, but unfortunate this will not help.

I want to setup standalone CA for certificates.
Root Certificate will be placed in BIG-IP for client certificate sign and verification.
Client certificates will be created from the same standalone CA server, manually it be installed on the laptops those are not part of domain and who likely working from outside office. ( Assume they are clients and outside domain laptops).

I have installed Standalone CA.
Created Root Certificates and copied the same and placed in BIG-IP.
Created client certificate from the standalone CA server, installed on the laptop and i can see that installed client certificate located in Personal Certificates.
Assumed it will work, but it did not and looking for help.
Please help.....
Regards,
Skumar.
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39728385
Only creating root certificate will not help

Have you found any CSR generation wizard as per my earlier comment in F5?

You need to generate CSR from f5, submit that request to standalone CA, CA server will generate certificate with private key and that cert with private key need to be imported on F5

Hopefully then it should work

Mahesh
0
 

Author Closing Comment

by:Skumar_CCSA
ID: 39787511
thanks mahesh.,
problem solved after following various links..
however your sugg gr8ly helped to fix.
0

Featured Post

Can’t get the mobile email signature right?

Not having any luck when trying to create an email signature for mobile devices? Does the formatting keep messing up? Make sure you have great email signatures on all devices by using Exclaimer Cloud - Signatures for Office 365.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now