Forum Discussion
Export SSL Cert from BIGIP to IIS?
Export SSL Cert from BIGIP to IIS?
Step by Step process as I am new to F5 Big-Ip. I was able to export the SSL cert by the below way and not sure is it works on IIS.
Log in to Big-IP Certificate Mgmt Traffic Certificate Mgmt Select the appropritate SSL cert and Export it to local destop Select the appropriate Key table and Export it to Local desktop
Send across both SSL device cert and key to IIS server for import. will that works?
- Samir_Jha_52506
Noctilucent
F5's cert n key will work on IIS server but need to convert in .p12 format.
- RossVermette
Nimbostratus
To convert to pfx format you can use the following ssl command:
openssl pkcs12 -export -out cert.pfx -in certfile.crt -inkey key.key
- RaghavendraSY
Altostratus
- davidfisher
Cirrus
Yes after exporting both cert and key, download openssl windows version and run those commands to combine the cert and key into a .pfx file.
The .pfx file contains both the cert and key in one file.
Right now what you have is 2 separate files.
If you need a cert chain along with this then use the -more command to add the chain to the .pfx file. See here: https://www.ssl.com/how-to/create-a-pfx-p12-certificate-file-using-openssl/
- Karthikeyan_D_3
Nimbostratus
THANKS Everyone for your support !
- davidfisher
Cirrus
accept an answer..
- RaghavendraSY_7
Cumulonimbus
- davidfisher
Cirrus
Yes after exporting both cert and key, download openssl windows version and run those commands to combine the cert and key into a .pfx file.
The .pfx file contains both the cert and key in one file.
Right now what you have is 2 separate files.
If you need a cert chain along with this then use the -more command to add the chain to the .pfx file. See here: https://www.ssl.com/how-to/create-a-pfx-p12-certificate-file-using-openssl/
- Karthikeyan_D_3
Nimbostratus
THANKS Everyone for your support !
- davidfisher
Cirrus
accept an answer..
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com