For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harry1's avatar
Harry1
Icon for Nimbostratus rankNimbostratus
Jul 28, 2016

backup and restore

Hi,

 

if I take F5 backup then can appliance selfsigned certificate include ? and if I restore , configuration will get restored with that self signed certificate? actually I have to renew the certificate and need to exchange among bigip appliances. but in safer side management wants roll back plan if this activity goes fail then can we restore old config with old selfsigned certificate?

 

application delivery
BIG-IP
LTM

5 Replies

  • Hannes_Rapp_162's avatar
    Hannes_Rapp_162
    Icon for Nacreous rankNacreous
    Jul 28, 2016

    Yes, the UCS archive contains SSL certificates and private keys (unless you exclude). If you make amendments to your certificates in your active configuration after the UCS has been created, these changes will not be merged into the existing UCS archives. You would have to create another UCS backup for that.

     

    To be on the safe side, just keep a plain-text copy of your current self-signed SSL certificate in addition to the UCS archive.

     

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jul 28, 2016

    Yes, the UCS archive contains SSL certificates and private keys (unless you exclude). If you make amendments to your certificates in your active configuration after the UCS has been created, these changes will not be merged into the existing UCS archives. You would have to create another UCS backup for that.

     

    To be on the safe side, just keep a plain-text copy of your current self-signed SSL certificate in addition to the UCS archive.