For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Relaze's avatar
Relaze
Icon for Nimbostratus rankNimbostratus
Apr 06, 2020

CA not trusted/unknown New SSL Certificate

Hello everyone,   i've replaced a new SSL certificate on my F5 (not self signed) and the F5 doesn't know the authority. What is the best way to implement the CA on the F5? On normal Servers i li...
application delivery
BIG-IP
security
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Apr 06, 2020

If you are talking about client or server SSL certificate then you need to import valid certificate file and its associated private key file. Once it is imported, you need to call both files under client or server SSL profile. Once it is configured, you need to call created SSL profile to Virtual Server.

 

In some cases, you also need chain of certificate or bundle certificate which is used for creating chain of trust between the CA that signed the certificate and the CA that is already trusted by the recipient of the certificate.

 

The step for configuration is given in below article,

 

https://support.f5.com/csp/article/K13302

 

Hope it helps!

 

Mayur