LTM ver11 on Generating SSL Cert CSR

Danial,

 

 

Local Traffic - SSL Certificate List or System - File Management - SSL Certificate List

 

 

Hope this helps,

 

N

Hi,

 

 

Thanks for your reply.

 

 

Do you know in LTM version 11 able to do SSL Certificate offloading? If yes, can let me know where to set it?

 

 

Thanks.

 

Danial

 

Danial,

 

 

Yes, you do this on the VIP by adding a client SSL Profile. This is the same as previous versions.

 

 

Rgds

 

N

Posted By nathan on 07/03/2013 04:20 AM

 

Danial,

 

 

Yes, you do this on the VIP by adding a client SSL Profile. This is the same as previous versions.

 

 

Rgds

 

N

 

 

Hi,

 

 

Sorry, I cannot find the SSL Offloading in the v11, it look the F5 GUI had change in v11. Any guideline?

 

 

Thanks.

 

Steps to create and map a SSL profile to https VIP in v 11.x

 

 

Create a SSL profile

 

Local Traffic ›› Profiles ›› SSL ›› Client ›› Create

 

Give a "name" and Map the required Certificate & Key (Chain - If required)

 

 

Attach the SSL profile to VIP

 

Local Traffic ›› Virtual Servers ›› Virtual Server List ››

 

Under the Virtual IP where you want to map the SSL Profile(Client) - select the SSL profile created in above step and move it to the left side.

 

 

Hope this helps.

 

 

Do let me know in case you need further assistance

Hi Ajmal,

 

 

For the step of creating SSL profile. Do you know where to generate the .csr? So we can offload the SSL certificate in the F5.

 

 

Thanks.

 

Danial

Hi Danial,

 

 

You would need to do this in few steps

 

Create your new CSR under System - File Management - SSL Certificate List , and then load your certificate from your certificate vendor once you've submitted the CSR to them.

 

Once your certificate and key pair are set up then you should be able to then create a SSL profile and assign the certificate and key within the profile , as per the advise from Ajmal.

 

 

Then all you need to do is assign that profile to your SSL VIP.

 

 

The following link should also help

 

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-11-4-0/11.htmlconceptid

 

 

Hope this helps.