Solved

Root Certificate, Client Certificate

Posted on 2013-12-17
6
537 Views
Last Modified: 2014-01-16
Hi Experts,

Trying to create SSL root certificate and client certificate for authentication.
Can you please send me the steps, your help will greatly help to solve the problems.
I have already tried the steps, but it did not work successfully.
Not sure what i am missing.
Root certificate will be installed in VPN appliance.
Client certificates will be installed in Laptops for those who want to connect VPN. (Not member of Domain)

Regards,
Skumar
0
Comment
Question by:Skumar_CCSA
  • 3
  • 3
6 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 39725844
Some more information is required
What steps you have tried ?
Which VPN device you are using ?
You can have windows based Standalone CA server who can provide certificates to your VPN appliance and clients as well

Mahesh
0
 

Author Comment

by:Skumar_CCSA
ID: 39725862
HI Mahesh...

Appreciated your quick response.
F5 BIG-IP VPN Appliance.
Standalone CA server...provide Certificate to VPN Appliance (Root) and clients as well.
I have installed Certificate Authority services in standalone server..created Root Certificate.
Client certificate through IIS page, create request and choose client certificate and selected the Alg-sha1(Microsoft RSA) value.

Regards,
Skumar.
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39726054
Have you tried to generate CSR from F5 ?
http://www.digicert.com/csr-creation-f5-big-ip.htm
If CSR is generated, are you also able to generate certificate through Windows Certification Authority ?
In order to generate certificate through windows based CA, you need to open up windows CA through web interface. For ex: http://mycaserver/certsrv
For CA web interface, you must install CA web enrollment component on CA server as well.
If you have generated certificate successfully, are you able to import in F5 device ?

What exact problem you are facing please ?

Mahesh
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:Skumar_CCSA
ID: 39727558
Hi Mahesh,

I have checked these option, but unfortunate this will not help.

I want to setup standalone CA for certificates.
Root Certificate will be placed in BIG-IP for client certificate sign and verification.
Client certificates will be created from the same standalone CA server, manually it be installed on the laptops those are not part of domain and who likely working from outside office. ( Assume they are clients and outside domain laptops).

I have installed Standalone CA.
Created Root Certificates and copied the same and placed in BIG-IP.
Created client certificate from the standalone CA server, installed on the laptop and i can see that installed client certificate located in Personal Certificates.
Assumed it will work, but it did not and looking for help.
Please help.....
Regards,
Skumar.
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39728385
Only creating root certificate will not help

Have you found any CSR generation wizard as per my earlier comment in F5?

You need to generate CSR from f5, submit that request to standalone CA, CA server will generate certificate with private key and that cert with private key need to be imported on F5

Hopefully then it should work

Mahesh
0
 

Author Closing Comment

by:Skumar_CCSA
ID: 39787511
thanks mahesh.,
problem solved after following various links..
however your sugg gr8ly helped to fix.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
If you use NetMotion Mobility on your PC and plan to upgrade to Windows 10, it may not work unless you take these steps.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now