F5 CA Certificate Upload

Steps to install SSL certificate is mentioned below:

A. Login to F5 active device

B. Go to System ›› File Management : SSL Certificate List

C. Click create button and update the details as mentioned below Note: In common name you need to mention FQDN name. Always select key size as 2048.

D. Download the CSR file and send to your vendor for a required certificate.

Vendor will provide following certificates.

1. Website certificate --This one you need to import

    

2. AddTrustExternalCARoot and UserTrustSAAddtrustCA -- You need to combine these two certs for intermediate certificate.

    

3. Trusted Secure Certificate Authority

    

E. Now import the certs as mentioned below. System ›› File Management : SSL Certificate List ›› Import F. Both Cert and key should be same name.

G. Once cert, key and intermediate certs are imported we need to create SSL client profile.

H.Configure new SSL certs under Client profile.

I. Create a new profile as mentioned below Go to Local Traffic ›› Profiles : SSL : Client In Certificate, key and chain select the files which you created Then click Add Once certificate key chain is update, click finished.

J.Most of the times you need to update intermedaite certificate. Then you need to bundle certificates other than website certificate and import and call in SSL client profile chain section.

K. If you receive certifcate in pkcs format, you need to convert them to PEM format and then import to F5.

Hope this helps. Please let me know any more information is required.