iControl and Powershell - key import and certificate import

Try this one?

if ( (Get-PSSnapin | Where-Object { $_.Name -eq "iControlSnapIn"}) -eq $null ){
    Add-PSSnapIn iControlSnapIn
}

Setup Credentials
$user = 'myuser'
$pass = 'mypass'

$SSLDir = ""

$url = "mysite.com"

$success = Initialize-F5.iControl -HostName 10.10.10.10 -Username $user -Password $pass;
$f5 = Get-F5.iControl

$crtfilename = $url + ".crt"
$keyfilename = $url + ".key" 
$keyfile = $SSLDir + "\" + $keyfilename 
$crtfile = $SSLDir + "\" + $crtfilename

$F5.ManagementPartition.Set_active_partition("Common")

$F5.ManagementKeyCertificate.key_import_from_file(
                "MANAGEMENT_MODE_DEFAULT",
                (,$url),
                (,$keyfile),
                $false
                )

$F5.ManagementKeyCertificate.certificate_import_from_file(
                "MANAGEMENT_MODE_DEFAULT",
                (,$url),
                (,$certfile),
                $false
                )

/Patrik

Still doesn't work.

Then I'm at a loss. I sent a message to the iControl guru. Hopefully he'll have time to enlighten us mortals.

/Patrik

I revisted this myself and tried using import from pem instead of import from file, but that fails as well.

Were you ever able to get this working?

Negative. I have it on my task list of things to tackle. Most likely I will have to open a support case at some time. In the meantime, our service desk has been importing new certs and keys manually via the web interface.

Bummer, automating this is on my list and it doesn't look promising. I understand that it works with Ruby, but I have no experience (or much desire) in that. If I ever come up with anything I'll update this. I'm surprised that F5 hasn't stepped in and assisted on this forum.

I had this fully automated in v10.x (upload new crt key pair and create a SSL Client profile if one did not already exist), but whatever I had there doesn't work in 11.x

Looks like the mode is being passed in as a string? Try something like this:

$mgmtModeType = New-Object -TypeName iControl.ManagementKeyCertificateManagementModeType
$mgmtModeType.value__ = 0

Then add it into the call:

 $F5.ManagementKeyCertificate.key_import_from_file(
                $mgmtModeType,
                (,$url),
                (,$keyfile),
                $false
                )

take a look at this posting

https://devcentral.f5.com/questions/what-is-the-path-to-a-users-home-directory-from-root