For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

HG's avatar
HG
Icon for Cirrus rankCirrus
Feb 03, 2017

Exclude certificates from QKview file

Hi all,

 

I did some research and I released that the certificates and privates keys are included in a qkview file.(correct me if i'm wrong). I also checked the parameters of the qkview command through cli (qkview -h) where I wasn't able to spot any parameters in order to exclude the certificates. Does anyone know any way to accomplish that ?

 

Thanks in advance.

 

LTM
security

1 Reply

  • Kevin_K_51432's avatar
    Kevin_K_51432
    Historic F5 Account
    Feb 03, 2017

    Greetings, You may be thinking of the UCS which does gather SSL certs and keys for backup and recovery. The qkview file may have some meta information about the cert and key files, but not the files themselves.

     

    Optional: If you want to exclude SSL private keys from the UCS archive, use the following command syntax. Replace with the full path to the UCS archive file.

     

    save /sys ucs no-private-key

     

    https://support.f5.com/csp/article/K13132

     

    Kevin