Forum Discussion
Declaration for loading Cert/PrivKey in Common
- Feb 13, 2025
Hi,
I don't think it's possible to upload directly to /Common. You can only upload to /Common/Shared (in order to avoid conflicts with manual LTM configuration)
Reference: BIG-IP AS3 Frequently Asked Questions (FAQ)When does BIG-IP AS3 write to the Common partition for LTM configurations?
- As noted above, BIG-IP AS3 only writes to the Common partition when you specifically use /Common/Shared. Otherwise, BIG-IP AS3 does not write to the Common partition for LTM configurations to ensure there is no impact to an existing device configuration where both BIG-IP AS3 and legacy configuration methods are being used
So, using your example declaration, I think you would need to adjust it like so:{ "$schema": "https://raw.githubusercontent.com/F5Networks/f5-appsvcs-extension/master/schema/latest/as3-schema.json", "class": "AS3", "action": "deploy", "declaration": { "class": "ADC", "schemaVersion": "3.45.0", "id": "import-cert", "label": "Certificate Import", "Common": { "class": "Tenant", "Shared": { "class": "Application", "template": "shared", "myCertName": { "class": "Certificate", "certificate": { "base64": "<base64 encoded certificate>" }, "privateKey": { "base64": "<base64 encoded private key>" } } } } } }
Hi,
I don't think it's possible to upload directly to /Common. You can only upload to /Common/Shared (in order to avoid conflicts with manual LTM configuration)
Reference: BIG-IP AS3 Frequently Asked Questions (FAQ)
When does BIG-IP AS3 write to the Common partition for LTM configurations?
- As noted above, BIG-IP AS3 only writes to the Common partition when you specifically use /Common/Shared. Otherwise, BIG-IP AS3 does not write to the Common partition for LTM configurations to ensure there is no impact to an existing device configuration where both BIG-IP AS3 and legacy configuration methods are being used
So, using your example declaration, I think you would need to adjust it like so:
{
"$schema": "https://raw.githubusercontent.com/F5Networks/f5-appsvcs-extension/master/schema/latest/as3-schema.json",
"class": "AS3",
"action": "deploy",
"declaration": {
"class": "ADC",
"schemaVersion": "3.45.0",
"id": "import-cert",
"label": "Certificate Import",
"Common": {
"class": "Tenant",
"Shared": {
"class": "Application",
"template": "shared",
"myCertName": {
"class": "Certificate",
"certificate": {
"base64": "<base64 encoded certificate>"
},
"privateKey": {
"base64": "<base64 encoded private key>"
}
}
}
}
}
}
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com