Forum Discussion

SSHSSH_97332's avatar
SSHSSH_97332
Icon for Nimbostratus rankNimbostratus
Nov 18, 2012

Importing Certificate For HTTPS Termination

i will put F5 LTM to offload Server SSL connetions ( one to one , one VIP to one Server IP ) .

 

i have the certificate installed on the server with its private key ( trusted Verisign Certificate ) , Can i import this Verisign Certificate to F5 & use in SSL Client profile , or i need to Create CSR from F5 & generate a new certificate Trusted ?

 

i don't want users to recevive Certifiacte warning

 

config
design

3 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 19, 2012
    You can directly import the key and certificate using the GUI. File format should be PEM. Post here again if you need help converting the files from something else. Also, don't forget to specify the CA/chain certificates in the profile if necessary. Test first!
  • SSHSSH_97332's avatar
    SSHSSH_97332
    Icon for Nimbostratus rankNimbostratus
    Nov 19, 2012
    but i thought that users will receive a certificate warning if Certificate is not Created from CSR taken from F5 box itself ?
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 19, 2012
    No, that is not necessary, it'll work just fine as long as you have the private key from the server.