Forum Discussion
NimbostratusIn a custom Client SSL profile what is the purpose of the PassPhrase box?
When the server guys supply certificates to us they also provide a password. The password is needed to successfully import the cert into the F5. When I build a client SSl profile for an App there is also a PassPhrase box and we enter that password in the PassPhase box. My question is do I really need to enter that password in the client ssl profile? What is it used for? The last profile I built I purposely left off the PassPhrase and the VIP still worked. Can you clarify this for me? Thanks.
3 Replies
- Kevin_Stewart
Employee
When you import the cert and key, I'm assuming you do so as a p12/pfx file? That password is to unlock the pkcs12 encryption to allow the cert and key to be exported as PEM.
The passphrase option in the SSL profile is if the key is still encrypted (which it rarely ever is).
- Kevin_Stewart
I wouldn't call it a best practice as much as a requirement, or lack thereof. If your private keys aren't encrypted and require a passphrase, then you don't need the passphrase in the SSL profile.
- Kevin_Stewart
That's correct.
