Creating new GTM device certificate
The device certificates on our GTMs are due to expire soon. I'd like to take the opportunity to increase the key length from 1024 to 2048. I've already done this on one of our LTMs without any problems by following sol9114.
Generate the F5 device private key by typing the following command:
gencert -p /config/httpd/conf/ -n server 1024
Generate the F5 device certificate by typing the following command: openssl req -new -key /config/httpd/conf/ssl.key/server.key -days 365 -x509 -out /config/httpd/conf/ssl.crt/server.crt Note: This command creates a certificate that expires in 365 days. To change the expiration date, enter a different number of days after the days flag.
Restart the httpd process by typing the following command: bigstart restart httpd
Am I OK to follow this procedure for the GTMs?