Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIGIP.

A ServerSSL profile enables the BIG-IP to re-encrypt traffic before sending it to the backend servers, acting as an SSL client. As a client, the BIG-IP does not need its own SSL certificates; it trusts the server's certificate or performs validation against CAs, but it doesn't present its own certificate unless explicitly configured for client certificate authentication to the server.

The existence of certificates is not a requirement for a ServerSSL profile unless the backend server is configured to demand client certificates from the BIG-IP.

Requiring CA-issued certificates for the BIG-IP itself is incorrect for a standard ServerSSL profile where the BIG-IP is the client; it validates the server's certificate.

Certificates created within the company are not inherently required for a ServerSSL profile, which primarily handles the SSL handshake with backend servers.