Forum Discussion

gym1's avatar
gym1
Icon for Nimbostratus rankNimbostratus
Apr 29, 2024

(How) can I get two client certificates in one APM session?

I have a customer with iPads that need to authenticate to APM with a user certificate. This has been working fine, but there is also now need to read a field from a per-device certificate on each iPa...
BIG-IP Access Policy Manager (APM)
cert auth
clientssl
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Apr 30, 2024

You should be able to simply use multi-domain SSO (it allows multiple hostnames to share the same APM session) with two DNS names and use two vips (each with a separate "advertised CAs" setting in the clientssl profile so hopefully the client doesn't get a popup to choose the cert), attached to the same access profile, and collect the second certificate once the session is established inside of a per-request policy.

Testing and setting this up would be somewhat complex.