Deployment Example 2: Federation Using SAML v2

ProcedureTo Request an SSL Certificate

  1. Log in to the BIG-IP load balancer.

  2. Click Proxies in the left pane.

  3. Click the Cert Admin tab, and then click the “Generate New Key Pair/ Certificate Request” button.

  4. In the Create Certificate Request page, provide the following information:

    Key Identifier:

    LoadBalancer-9.siroe.com

    Organization:

    siroe.com

    Domain Name:

    LoadBalancer-9.siroe.com

    Email Address:

    jdoe@siroe.com

  5. Click the Generate Request button.

  6. In the Generate Request page, copy the request that looks similar to this:


    -----BEGIN CERTIFICATE REQUEST-----
    UbM77e50M63v1Z2A/5O5MA0GCSqGSIb3DQEOBAU
    AMF8xCzAJBgNVBAYTAlVTMSAwHgYDVQQKExdSU0
    EgRGF0YSBTZWN1cml0eSwgSW5jLjEuMCwGA1UEC
    xMlU2VjdXJlIFNlcnZlciBDZXJ0aWZpY2F0aW9u
    IEF1dGhvcml0eTAeFw0wMTA4MDIwMDAwMDBaFw0
    wMzA4MDIyMzU5NTlaMIGQMQswCQYDVQQGEwJVUz
    ERMA8GA1UECBMIVmlyZ2luaWExETAPBgNVBAcUC
    FJpY2htb25kMSAwHgYDVQQKFBdDYXZhbGllciBU
    ZWxlcGhvYm9uZGluZy5jYXZ0ZWwuY29tMIGfMA0
    GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8x/1dxo
    2YnblilQLmpiEziOqb7ArVfI1ymXo/MKcbKjnY2
    -----END CERTIFICATE REQUEST-----
  7. Paste this text into a request form provided by a root certificate authority (CA) such as Verisign or Thwarte.

    See the certificate authority website such as http://www.verisign.com/ or http://www.thawte.com/ for detailed instructions on submitting a certificate request.