Forum Discussion

lami's avatar
lami
Icon for Nimbostratus rankNimbostratus
Dec 04, 2020

keys repository in f5

Hello,  Could you please answer me, do keys stored on F5 in ciphertext or plaintext format? Also do all F5 integrate HSM module if not is the F5 is FIPS 140-2 compliant ? Thanks so much
BIG-IP
security
Dario_Garrido's avatar
Dario_Garrido
Icon for MVP rankMVP
Dec 04, 2020

Hello Lami.

​

The location is this

Certificates --> /config/filestore/files_d/Common_d/certificate_d/*

Keys --> /config/filestore/files_d/Common_d/certificate_key_d/*

And keys could be store in plain text or cipher text (using a passphrase).

​

Besides this, you can use HSM (F5 supports several vendors).

REF - https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/big-ip-system-and-net-hsm-implementation-14-1-0/01.html

​

More info about FIPS support

REF - https://www.f5.com/company/certifications

 

Regards,

Darío.