Manual Chapter : Configuring SSL with mirroring

Applies To:

Show Versions Show Versions

BIG-IP APM

  • 16.1.5

BIG-IP ASM

  • 16.1.4, 16.1.3, 16.1.2, 16.1.1, 16.1.0
Manual Chapter

Configuring SSL with mirroring

You need to create an SSL certificate and custom SSL profile for secure communications between the two mirrored devices.
  1. Enable sys db:
    • tmsh modify sys db statemirror.secure value enable
    • tmsh modify sys db statemirror.verify value enable
  2. On the Main tab, click
    System
    Certificate Management
    Traffic Certificate Management
    SSL Certificate List
    and create a new SSL certificate.
    Standard SSL certificates are not supported for this feature.
  3. On the Main tab, click
    Local Traffic
    Profiles
    SSL
    Server
    . The SSL Server profile list screen opens. Create a new SSL profile with the created SSL certificate and with "Cache Size" = 0.
    See the BIG-IP System: SSL Administration Guide for more information on creating a custom SSL profile.