Forum Discussion

Dazzla_20011's avatar
Icon for Nimbostratus rankNimbostratus
Jul 26, 2011

Creating new GTM device certificate




The device certificates on our GTMs are due to expire soon. I'd like to take the opportunity to increase the key length from 1024 to 2048. I've already done this on one of our LTMs without any problems by following sol9114.



Generate the F5 device private key by typing the following command:


gencert -p /config/httpd/conf/ -n server 1024



Generate the F5 device certificate by typing the following command: openssl req -new -key /config/httpd/conf/ssl.key/server.key -days 365 -x509 -out /config/httpd/conf/ssl.crt/server.crt Note: This command creates a certificate that expires in 365 days. To change the expiration date, enter a different number of days after the days flag.



Restart the httpd process by typing the following command: bigstart restart httpd



run bigip_add



Am I OK to follow this procedure for the GTMs?



Many Thanks


No RepliesBe the first to reply