Provision to a Kemp Virtual LoadMaster

1. Sign in to Next-Gen Trust Security.
2. Click Insights > Machines.
3. Select the Kemp Virtual LoadMaster machine you want to provision a certificate to.
4. Click Provision a certificate.
5. From Choose a certificate from the inventory, search for and select the certificate you want to provision.
   Verify that you selected the correct certificate by reviewing the Subject DN, Validity, and Fingerprint.
6. In Certificate Name, enter the name you want the certificate to use on the Kemp LoadMaster.
   What if the certificate name is already in use?
   When provisioning a certificate, Next-Gen Trust Security checks whether the name already exists on the Kemp LoadMaster:
   • If the name is not in use, it is applied as entered.
   • If the name is already in use by the same certificate, that certificate is reused.
   • If the name is in use by a different certificate, Next-Gen Trust Security creates a new unique name by appending the expiration date and a numeric suffix (for example, my-cert-name_22Oct05_3117).
7. In Virtual Service Name, enter the name of the virtual service to associate with the certificate.
8. In Virtual Service IP Address, enter the IP address for the virtual service.
9. In Service Port, enter the port number used by the virtual service.
10. From Protocol, select the network protocol used by the virtual service:
    • TCP
    • UDP
11. (Optional) To require a Server Name Indication (SNI) hostname, enable Require SNI hostname.
12. (Optional) To prevent the certificate from being pushed immediately, set Push upon saving to No.
13. Click Save.