Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

chelusco's avatar
chelusco
Icon for Nimbostratus rankNimbostratus
Oct 17, 2024

Installing a PKCS 12 File onto an F5 Device

I have been able to upload my pfx file to the devices downloads and such and checked using /mgmt/tm/util/bash. I have been trying to install it on the F5 device using: { "command": "install", "nam...
cloud
devops
Michael_Saleem's avatar
Michael_Saleem
Icon for MVP rankMVP
Oct 17, 2024

Instead of a PKCS12, have you tried uploading the identity cert, intermediate CA bundle and privat key separately using PEM format?

I have used the iControl REST API previously to install an SSL cert/key pair and intermediate certificates.

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<INTERMEDIATE CA BUNDLE>.crt","from-local-file":"/var/tmp/<INTERMEDIATE CA BUNDLE>.crt"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/cert

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<CERTIFICATE FILENAME>.crt","from-local-file":"/var/tmp/<CERTIFICATE FILENAME>.crt"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/cert

    curl -sk -u "<ADMIN USERNAME>":"<PASSWORD>" -H "Content-Type: application/json" -X POST -d \
    '{"command":"install","name":"<CERTIFICATE FILENAME>.key","from-local-file":"/var/tmp/<CERTIFICATE FILENAME>.key"}' \
    https://<BIG-IP MGMT IP>/mgmt/tm/sys/crypto/key