For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_123352's avatar
Brian_123352
Icon for Nimbostratus rankNimbostratus
Jul 25, 2018

Migrating from Hardware Platform to Subscription

Is there any way to use the archive feature to move all your SSL certs and keys from one system to another rather than export the certificates and keys and import them individually?  
BIG-IP
BIG-IQ
security
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Jul 25, 2018

K82540512: Overview of the UCS archive 'platform-migrate' option

 

F5 added a new option, platform-migrate, to the tmsh load sys ucs command.

 

This option enables you to migrate configurations from older platforms to newer platforms using an existing user configuration set (UCS) file. The new platform can be a newer generation hardware device, a Virtual Clustered Multiprocessing (vCMP) guest, or BIG-IP Virtual Edition (VE).

 

Otherwise, investigate the SCF file

 

K13408: Overview of single configuration files (11.x - 13.x)

 

which allows significant scope for text editing and merging configuration elements.

 

A single configuration file (SCF) is a flat, text file that contains all of the objects that compose the BIG-IP configuration.

 

...

 

The data files in the BIG-IP filestore in the /config/filestore directory will not be saved into the SCF file (for example, the SSL certificate/key files and external monitor files). For the files in filestore that are being referenced by the SCF configuration file, they will be automatically saved into a separate TAR file when a copy of SCF file is saved.