Forum Discussion

Kesha_50406's avatar
Kesha_50406
Icon for Altostratus rankAltostratus
Aug 13, 2013

F5 BIG-IP WebGUI intermediate certificate

I don't see how I can install an intermediate certificate for the F5 BIG IP management WebGUI. The device seems to be using the "Device Certificate" (under System > Device Certificates) for its manag...
BIG-IP Access Policy Manager (APM)
management
security
boneyard's avatar
boneyard
Icon for MVP rankMVP
Aug 14, 2013

isnt the device certificate stored somewhere on the bigip, (here i believe: /config/httpd/conf/ssl.crt/) couldn't you try to add the intermediate there to it? so just open with vi and paste the intermediate in there. might require a httpd restart or even bigstart restart.

 

[EDIT] hmmm, looked at apache config and apparently you need to modify SSLCertificateChainFile in the apache config. in the bigip this is found under /config/httpd/conf.d/ssl.conf i believe. not sure how supported it is if you are going to play around with that and what the effect is after an upgrade.