Forum Discussion
Bulk import SSL keys and certs from cisco ACE
Hi all,
I have to migrate lots of virtual servers from a Cisco ACE to an F5 BigIP V11.2.1.
On the ACE, there are several hundred pairs of SSL Certs and keys that I want to bulk import into specific partitions of the Big IP.
I managed to extract all the certs and keys from an backup tarball of the ACE and have them stored in an temporary directory on the Big IP.
Now, I want to bulk import them using "tmsh install /sys crypto" commands. The problem here is, I want to have them installed in different partitions. Hence, I cannot create a small shell script reading
tmsh install /sys crypto key key1.key
tmsh install /sys crypto cert crt1.crt
tmsh create /ltm profile clientssl foo bar
because that would put all the config items into the /Common partition.
I also cannot create a merge file for use within the tmsh shell (after changing the partition), because "install /sys config merge" will not accept "install" commands.
Anyone experiencing the same problems? Any hint is appreciated! many thanks in advance!
Martin
1 Reply
- Martin_Kaiser_1
Nimbostratus
I obviously tend to think too compilcated....
tmsh install crypto key /partition/keyname keyfile.key solved the "problem"....
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com