Add SSL/TLS Certificate

This guide assumes an SSL/TLS certificate is imported into the LoadMaster. For more information and steps for SSL/TLS configuration, reference the SSL Accelerated Services Feature Description.

1. Click View/Modify Services (under Virtual Services) in the left-hand navigation.
2. Click Modify for the Exchange 2019 HTTPS Offload with ESP and WAF Virtual Service on port 443 (or Exchange 2019 HTTPS Reencrypted with ESP and WAF if that was selected during the creation)
3. Expand SSL Properties (Acceleration Enabled).

   

4. Select the certificate to use in the Available Certificates and click the “arrow” > to move it to Assigned Certificates.
5. Click Set Certificate.

Add the Real Servers

1. Click View/Modify Services in the left-hand navigation.
2. Click Modify for the Exchange 2019 HTTPS Offloade with ESP and WAF Virtual Service on port 443 (or the Exchange 2019 HTTPS Reencrypted with ESP and WAF if that was selected during the creation).
3. Expand the SubVSs section.
4. Click Modify for Exchange 2019 HTTPS Offload with ESP and WAF - Authentication Proxy (or the Exchange 2019 HTTPS Reencrypted with ESP and WAF - Authentication Proxy if that template was selected during creation).
5. Expand the Real Servers section.
6. Click Add New.
   Note: In the ESP-enabled Virtual Services, there should be no Real Servers in the Authentication Proxy SubVS, unless you are using Kerberos server-side authentication. For further details on Kerberos Constrained Delegation (KCD), refer to the Kerberos Constrained Delegation Feature Description.

   

7. For the Real Server Address, enter the IP Address for one of the Exchange Servers.
8. Select the Add to all SubVSs check box.
   Note: Ensure to delete the Real Server from the Authentication Proxy SubVS if you are not using Kerberos server-side authentication.
9. Click Add This Real Server.
10. Add additional Real Servers using the Add to all SubVSs check box.