For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rob_carr's avatar
rob_carr
Icon for Cirrocumulus rankCirrocumulus
Jan 20, 2012

Importing SSL Certs and Keys via TMSH

According to this topic (http://devcentral.f5.com/Community/...fault.aspx) there exists a 'TMSH install cert' command that presumably imports SSL certs and keys. I'm working with LTM's running 10.2....
dev
TMSH
Mike_Dayton_108's avatar
Mike_Dayton_108
Icon for Nimbostratus rankNimbostratus
Jan 04, 2017

For version 10, you can just copy the files into the matching directories:

 

Payload certs:

 

/config/ssl/ssl.csr

 

/config/ssl/ssl.crt

 

/config/ssl/ssl.key

 

HTTPD certs for management:

 

/etc/httpd/conf/ssl.csr

 

/etc/httpd/conf/ssl.crt

 

/etc/httpd/conf/ssl.key

 

For version 11 (maybe someone can update this to be more specific), these files are managed by TMOS requiring you to import the certificate and key data.

 

The following was done with 11.5. This command will create test.crt and test.key as the managed prefix names. The source file is default.crt or key.

 

tmsh create /sys file ssl-cert test.crt source-path

 

tmsh create /sys file ssl-key test.key source-path