Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Sharadwi_352731's avatar
Sharadwi_352731
Icon for Nimbostratus rankNimbostratus
Feb 23, 2018

Creating a new device certificate - signed by internal CA

I am using version 11.5.3. I have a requirement to update the device certificate with an internal CA signed certificate. We have a self signed cert that wont expire until 2025. I am planning on doin...
LTM
security
amintej's avatar
amintej
Icon for Cirrus rankCirrus
Feb 26, 2018

Hello,

I modified a little bit your procedure:

  1. System > Device certificate > Renew -> Please, be sure to select "Issuer: Certificate Authority". This action will generate CSR, copy csr text at the end of the wizard and send to your CA(issuer). Note CSR files have headers:

    -----BEGIN CERTIFICATE REQUEST-----
-----END CERTIFICATE REQUEST-----

  2. Yes, you are right no action at this point.

  3. Once you receive the certiticate, import the CA file 
    `System  ››  Device Certificates : Trusted Device Certificates

Finally, import F5's certificate signed by your CA:

`System  ››  Device Certificates : Device Certificate

and this will replace the certificate immediately if the verification is OK in F5.