For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

puluck's avatar
puluck
Icon for Cirrus rankCirrus
May 21, 2016

Exporting certificate from F5 in pkcs12 format for version 11.5.4

Hi All,

 

I wanted to export certificate from F5 to export another device Data power .Currently its not supporting the .crt format hence i need to export the certificate and key in pkcs12 format .

 

Could you please guide me how we can do that

 

Thanks

 

application delivery
LTM

2 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    May 21, 2016

    You can't export as p12 from the GUI, but you can export the cert and private key and create the p12 with OpenSSL:

    openssl pkcs12 -export -out certificate.pfx -inkey privateKey.key -in certificate.crt
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    May 21, 2016

    You'll want to do the following:

     

    1. Export the certificate in PEM format to a file on your local machine

       

    2. Export the private key in PEM format to a file on your local machine

       

    3. If you're already on a Linux machine you should already have OpenSSL, otherwise copy the certificate and private key to a machine that has OpenSSL. Run the above command, substituting the name after the -in option with the name of your certificate file, and substituting the name after the -inkey option with the name of your private key file. The name after the -out option is the name of the p12 file that will be created. This command will prompt you to create a password for the p12.

       

    The files are also stored on the BIG-IP in the /config/files/filestore/Common folder, but it's probably easier to export and use OpenSSL on a separate machine.