For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kchristidis_249's avatar
kchristidis_249
Icon for Nimbostratus rankNimbostratus
Mar 09, 2016

is there a way to download / export the actual Key / RSA Certificate files from BIG-IP, using the iControl REST?

Hi all,   I know there is a way to upload and import key/cert to F5 either fromFile or fromUrl.   I also know that there is a way to download files from /mgmt/tm/asm/file-transfer/downloads/fo...
devops
iControl
iControlREST
security
Satoshi_Toyosa1's avatar
Satoshi_Toyosa1
Ret. Employee
Feb 18, 2019

Demystifying iControl REST Part 5: Transferring Files describes the method to download a file from BIG-IP.

Because the API only allows you to download files under 

/shared/images
, you need to make a copy of the target file there. Unfortunately, 
/mgmt/tm/sys/util
(or 
tmsh run sys util
) does not have a copy function (it does have 
mv
and 
rm
though), you need to use 
/mgmt/tm/sys/util/bash
to run the Unix 
cp
command before calling the download request.

I personally recommend the scp/sftp method Brad Parker mentioned. You do not need to worry about tidying the shared directory.