Kemp Support, how can we help?

The latest application delivery knowledge and expertise at your fingertips.

How to obtain an SSL certificate for the LoadMaster WUI

 

Information

 

Summary:

Wanted to know how they could obtain an SSL certificate for their LoadMaster WUI

Environment:

Product: LoadMaster

Version: Any

Platform: Any

Application: Any

Question/Problem Description:

While accessing the LoadMaster WUI, the devices are showing unsecure. In order to secure it we need to apply browser level certificate. Can we have help on the device level certificate ?

Steps to Reproduce:  
Error Message: Showing unsecure in browser
Defect Number:  
Enhancement Number:  
Cause: need to apply certificate
Resolution:

1. In order to apply an SSL certificate for your WUI, it will need to be added as an Administrative Certificate.
 
2. Once you have the certificate ready for use and imported on to the loadmaster, navigate to Certificates & Security > SSL Certificates > Administrative Certificates, and there you can select the desired certificate to be used for WUI access in your browser.
 

3. There are also several ways to obtain an SSL certificate, they can even be generated on the loadmaster. To generate it on the loadmaster, navigate to SSL Certificates > Generate CSR. Here you will submit your details.
 
4. Upon generating the CSR, you will be provided the unsigned RSA certificate request. Copy the following, in its entirety, and send it to your trusted certificate authority for them to sign it.
 
5. You will also want to SAVE the generated private key.
 
6. Once your Certificate Authority signs the CSR, they will provide you the certificate that you can then install onto the loadmaster.

 

_________________________________________________________________

 

  • The LoadMaster comes with a self-signed cert by default, but you would most likely not want to use it for your admin WUI, since it would not cover your loadmasters hostname.
  • If you want to make use of a certificate which covers your own desired common name, you would need to have it signed by a CA once generated for that name.

 

Workaround:  
Notes:

 https://support.kemptechnologies.com/hc/en-us/articles/115003853166-How-To-Import-SSL-Certificates-To-Your-LoadMaster

https://support.kemptechnologies.com/hc/en-us/articles/203125829-SSL-Accelerated-Services#MadCap_TOC_32_3


Comments