For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ichnafi's avatar
Ichnafi
Icon for Cirrostratus rankCirrostratus
Oct 07, 2025
Solved

Ansible - Upload Certificates requires Administrator Role?

Hi,   I'm trying to give people the opportunity to manage their SSL Certificates themself. So I build something, that triggers an ansible playbook upload and update certificates on a LTM.   The u...
application delivery
deployment
devops
  • Jeffrey_Granier's avatar
    Jeffrey_Granier
    Oct 07, 2025

    Hi Ichnafi​ ,

     

    Unfortunately, admin role is needed in this use case: REST API Access.  I would say to consider an automation server and apply Firewall/BIG-IP source IP restrictions from that automation server and run the ansible playbook from there with the admin role.  

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 13, 2025

One thing you can do as an alternate role is "pull" certificates:

 

curl -sk -u certadmin:certadmin \
-X POST -H "Content-Type: application/json" \
-d '{"command": "install", "name": "myserver.key", "from-url": "https://staging/myserver.key"}' https://10.1.1.6/mgmt/tm/sys/crypto/key
 
curl -sk -u certadmin:certadmin \
-X POST -H "Content-Type: application/json" \
-d '{"command": "install", "name": "myserver.crt", "from-url": "https://staging/myserver.crt"}' https://10.1.1.6/mgmt/tm/sys/crypto/cert