For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

chelusco's avatar
chelusco
Icon for Nimbostratus rankNimbostratus
Oct 17, 2024

Installing a PKCS 12 File onto an F5 Device

I have been able to upload my pfx file to the devices downloads and such and checked using /mgmt/tm/util/bash. I have been trying to install it on the F5 device using: { "command": "install", "nam...
cloud
devops
Michael_Saleem's avatar
Michael_Saleem
Icon for MVP rankMVP
Oct 17, 2024

Instead of a PKCS12, have you tried uploading the identity cert, intermediate CA bundle and privat key separately using PEM format?

I have used the iControl REST API previously to install an SSL cert/key pair and intermediate certificates.

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<INTERMEDIATE CA BUNDLE>.crt","from-local-file":"/var/tmp/<INTERMEDIATE CA BUNDLE>.crt"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/cert

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<CERTIFICATE FILENAME>.crt","from-local-file":"/var/tmp/<CERTIFICATE FILENAME>.crt"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/cert

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<CERTIFICATE FILENAME>.key","from-local-file":"/var/tmp/<CERTIFICATE FILENAME>.key"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/key