For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ripkey_120880's avatar
Ripkey_120880
Icon for Nimbostratus rankNimbostratus
Jan 30, 2014

Bulk move SSL Certs

Hi, I'm currently doing an LTM migration from 2 3400's running 10.2.2 to a new pair running 11.4.1. I was wondering if there is a way to bulk export all the certs and then import them into the new L...
deployment
Kevin_Davies_40's avatar
Kevin_Davies_40
Icon for Nacreous rankNacreous
Apr 20, 2017

This following is performed in the GUI.

 

  1. Navigate to Local Traffic, SSL Certificates.
  2. Click archive button.
  3. Move everything from the right to the left. Both keys and certs
  4. Now move default.key and default.crt back to the right hand side.
  5. Specify a name for the file.
  6. Click Generate and Download file.
  7. On the new F5 click import.
  8. Specify its an Archive file.
  9. Select file.
  10. Submit
  11. Done
  • Rocky's avatar
    Rocky
    Icon for Nimbostratus rankNimbostratus
    Apr 20, 2017

    WOW! What a suggestion! I got it all right now, uploaded all ssl cert/keys and am able to load the bigip.conf file successfully. Thanks a ton, Kevin.

     

    I have another issue in loading the bigip_base file. It is throwing an error /bigip_base.conf at line: 20) "cert" unexpected argument. I have checked the line 20, here is the config:

     

    I have these certs in the filestore location...

     

    cm cert /Common/dtca-bundle.crt { --------------line 20 cache-path /config/filestore/files_d/Common_d/trust_certificate_d/:Common:dtca-bundle.crt_46481_10 checksum SHA1:2144:9ebcfad57e992ba99d3bab7dd267fa70cec69d01 revision 10 }

     

    How can I fix this? Any idea?

     

    Thanks!