Q: How do you install an intermediate certificate?
A: Many certificate authorities (CAs) such as VeriSign use a complex certificate hierarchy. This means that the certificate chain is as follows:
Root CA
|
|
+----------- Intermediate CA
|
|
+----------------------- End-Entity (Server) Certificate The Application Firewall software assumes a simple hierarchy of CA and end-entity certificates. If you have multiple CA certificates in your certificate chain, create a separate application for each in Application Firewall software versions earlier than 5.1.
For instructions on obtaining VeriSign's intermediate CA, see VeriSign CA Certificates..
For versions 5.1 and later, add the intermediate CA to your main certificate. It should follow the main server certificate.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
