Forum Discussion

elastic_82555's avatar
elastic_82555
Icon for Nimbostratus rankNimbostratus
Apr 16, 2014

Cannot Renew Certifcate and private key ( but keep the same name in F5 config )

Hi, Am trying to renew the wildcard certificate for our main domain. The CSR is generated elsewhere ( ie not on the F5 ), and have the cert/key from a CA already. The current certificate/key is ...
ASM Advanced WAF
devops
iApps
management
security
  • Cory_50405's avatar
    Cory_50405
    Apr 16, 2014

    So another option could be that you create a new certificate and key pair, and then manually edit /config/bigip.conf and replace every instance of the previous certificate and key with the new certificate and key in each of your SSL profiles. Once done, perform a 'tmsh load sys config'. This might also be a bit tedious, but less so than doing it by clicking through the GUI.

     

elastic_82555's avatar
elastic_82555
Icon for Nimbostratus rankNimbostratus

Cory, That sounds like a good option. I particularly dislike leaving old keys around, but once the change is done, then I could delete them. In fact, once I do the above, then I could reimport the new new cert/key combo and use the old name, and then do the same search and replace and delete the new name. An odd way to do things, but quite workable.

 

all else fails, this seems like a good option. thanks

 

Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Apr 16, 2014
Be sure to back up your bigip.conf file just in case something goes awry.
Related Content