How to generate a CSR and private key on F5 for a specific VIP

Under System --> File Management --> SSL Certificate List , select Create. Ensure that you choose "Certificate Authority" under Issuer. Note that the Certificate Properties such as Organization and Locality must match what is configured in your Symantec account.

When you select "Finish", you will receive a CSR that you'll input in your Symantec dashboard, and the private key will show up in your Certificate List.

Once you receive the Cert back, import it. Create an SSL profile, assign the cert to it, and assign the SSL profile to the VIP.