Forum Discussion
Certificate distribution among several devices
First time question. Is there a way to do a mass distribution of certificates either using enterprise manager or scripting? I have a new certificate that is needed to be deployed across several F5 LTM devices using version 11.5.1
1 Reply
- Michael_Jenkins
Cirrostratus
It's not very refined, but when I need to upload certificates to multiple BIG-IPs, I follow this process. I'm wanting to put it into a PowerShell script, but haven't had the time to devote yet). Hopefully it helps if you try to put together a script to do this.
IMPORT / INSTALL SSL CERTIFICATE & KEY THROUGH TMSH
-
SCP (using WinSCP or other file transfer client) CRT and KEY files to the server
/config/ssl/ssl.crt/config/ssl/ssl.key
-
Install the certificate and key using the same [NAME]
install /sys crypto cert [NAME] from-local-file /config/ssl/ssl.crt/[FILENAME]install /sys crypto key [NAME] from-local-file /config/ssl/ssl.key/[FILENAME]-
Test to verify certificate and key were installed
list / sys crypto cert [NAME]list / sys crypto key [NAME]
-
Save the config
save / sys config
Links I used in my research
-
SCP (using WinSCP or other file transfer client) CRT and KEY files to the server
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com