Change default SSL certificate in F5 LTM

You can change it from

System  ››  Device Certificates : Device Certificate  ››  Device Certificate

But remember, BIG-IP system uses this device certificate to authenticate access to the Configuration utility, and to accommodate device-to-device communication processes, such as ConfigSync, big3d, and gtmd.

-Jinshu

In the management GUI, it's under System -> Device Certificate. Go to the "Device Certificate" or "Device Key" tab and click the Import button to import a new certificate and private key.

For more details see:

• https://support.f5.com/kb/en-us/solutions/public/15000/600/sol15664.html

Hi All

Thanks for your replies. I was just wondering if it is possible to increase the existing ciphers to something more stronger in the default certificate for mgmt interface. In that case, probably, I won't have to replace the ssl cert because that will break down my HA and sync.

Using a stronger cert shouldn't break HA or sync, but you'd definitely have to replace the existing one.