Forum Discussion
Certificate distribution among several devices
First time question. Is there a way to do a mass distribution of certificates either using enterprise manager or scripting? I have a new certificate that is needed to be deployed across several F5 LTM devices using version 11.5.1
1 Reply
- Michael_Jenkins
Cirrostratus
It's not very refined, but when I need to upload certificates to multiple BIG-IPs, I follow this process. I'm wanting to put it into a PowerShell script, but haven't had the time to devote yet). Hopefully it helps if you try to put together a script to do this.
IMPORT / INSTALL SSL CERTIFICATE & KEY THROUGH TMSH
-
SCP (using WinSCP or other file transfer client) CRT and KEY files to the server
/config/ssl/ssl.crt/config/ssl/ssl.key
-
Install the certificate and key using the same [NAME]
install /sys crypto cert [NAME] from-local-file /config/ssl/ssl.crt/[FILENAME]install /sys crypto key [NAME] from-local-file /config/ssl/ssl.key/[FILENAME]-
Test to verify certificate and key were installed
list / sys crypto cert [NAME]list / sys crypto key [NAME]
-
Save the config
save / sys config
Links I used in my research
-
SCP (using WinSCP or other file transfer client) CRT and KEY files to the server
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com