This article refers to firmware 4.1 and higher.
Certificates are digital identity documents used for SSL offloading. Certificates are associated with the Barracuda Load Balancer to establish secure information exchange over the internet, allowing web servers to "prove" their identity to a browser. A certificate contains information such as user name, expiration date, a unique serial number assigned to the certificate by a trusted CA, organization name, domain name, locality, country, the public key, and the name of the CA that issued the certificate.
The Barracuda Load Balancer supports SSL certificates in PKCS12 and PEM formats. You can use a self-signed certificate or obtain a certificate from a trusted third party Certificate Authority (CA) for SSL encryption. The certificates can be uploaded on the BASIC > Certificates page.
- Generate/Import a Certificate - Create a secure and authentic certificate using the Barracuda Load Balancer, or import a third party certificate obtained from a trusted CA such as VeriSign. Some browsers require an encrypted certificate from a reliable and known CA. In this case you can:
- Import a third-party certificate obtained from the CA, or
- Download the certificate signing request (CSR) and send it to a trusted CA for signing.
- Trusted Certificate - A trusted certificate is sent from a trusted CA. Using a CA certificate as a trusted certificate implies that any entity that has a certificate signed by the CA is authenticated for SSL encryption.