ltm profile certificate-authority¶

ltm profile certificate-authority(1) BIG-IP TMSH Manual ltm profile certificate-authority(1)

NAME
certificate-authority - Defines the settings necessary to authenticate the client certificate.

MODULE
ltm profile

SYNTAX
Configure the certificate-authority within the ltm profile module using the syntax shown in the following
sections.

CREATE/MODIFY
create certificate-authority [name]
modify certificate-authority [name]
options:
authenticate-depth
ca-file
crl-file
default-name
description
update-crl

edit certificate-authority [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
non-default-properties

DISPLAY
list certificate-authority
list certificate-authority [ [ [name] | [glob] | [regex] ] ... ]
app-service
partition

show certificate-authority
show certificate-authority [ [ [name] | [glob] | [regex] ] ... ]
options:
all-properties
field-fmt
non-default-properties
one-line

DESCRIPTION
Use the certificate-authority component to modify or display a certificate-authority profile.

EXAMPLES
create ltm profile certificate-authority mycaprofile { ca-file ca.crt }

Creates a certificate authority profile named mycaprofile using the system defaults.

modify ltm profile certificate-authority mycaprofile { authenticate-depth 3 }

Modifies the authenticate-depth setting to 3 for the certificate authority profile named mycaprofile.

OPTIONS
app-service
Displays the application service to which the object belongs. The default value is none.

Note: If the strict-updates option is enabled on the Application Service that owns the object, you cannot
modify or delete the object. Only the Application Service can modify or delete the object.

authenticate-depth
Specifies the authenticate depth. This is the client certificate chain maximum traversal depth.

ca-file
Specifies the certificate authority file name or, you can use default for the default certificate
authority file name. Configures certificate verification by specifying a list of client or server
certificate authorities that the traffic management system trusts.

crl-file
Specifies the certificate revocation list file name. You can use default for the default certificate
revocation file name.

defaults-from
Specifies the profile that you want to use as the parent profile. Your new profile inherits all settings
and values from the parent profile specified.

description
User defined description.

name Specifies the profile instance name. This option is required for the modify command.

partition
Specifies the administrative partition within which the profile resides.

regex
Specifies the items that match the regular expression. The regular expression must be preceded by an at
sign (@[regular expression]) to indicate that the identifier is a regular expression. See help regex for
a description of regular expression syntax.

update-crl
Automatically updates the CRL file.

SEE ALSO
edit, glob, list, modify, regex, show, tmsh,

COPYRIGHT
No part of this program may be reproduced or transmitted in any form or by any means, electronic or
mechanical, including photocopying, recording, or information storage and retrieval systems, for any purpose
other than the purchaser's personal use, without the express written permission of F5 Networks, Inc.

BIG-IP 2013-04-12 ltm profile certificate-authority(1)