For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

sandy16's avatar
sandy16
Icon for Altostratus rankAltostratus
Sep 07, 2016

Overwriting a cert and key without deleting the Client-SSL-profile

Hi, we are in a process of renewing hundreds of certificates in our enterprise. I am looking for an efficient solution here. My idea is to import the new cert and key into the existing cert/key so th...
application delivery
LTM
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Sep 08, 2016

Hi Sandevsingh,

 

a Virtual Server is pointing to SSL Profiles and SSL Profiles are pointing to Certs, Keys and Chains.

 

If a cert, key and chain is renewed, then I tend to simply import the new ones (e.g. www.domain.de_2016 / www.domain.de_2016_chain). After the cert, key and chain are succesfully imported, I simply change the SSL Profiles where those certificated are attached to.

 

So there is no need to delete/recreate a SSL_Profile and/or to touch every individual Virtual Servers where those certificates are bound to...

 

Cheers, Kai