Forum Discussion
Ahmadj_283318
Nimbostratus
Nimbostratusprivate key and intermediate certificate
Hi I received the Root certificate and the intermediate certificate but when i try to create SSL profile it asks me about the key can anyone help, please?
RaghavendraSY_7Cumulonimbus
hI,
Please let me know from where you create CSR file? If you created CSR file from F5 key will be available already. if CSR is created from server etc.. then you need to ask key from respective teams.
Hope this helps.
Ahmadj_283318I imported from F5
- Ahmadj_283318
the new certificate which I have is wildcert
RaghavendraSYAltostratus
hI,
Please let me know from where you create CSR file? If you created CSR file from F5 key will be available already. if CSR is created from server etc.. then you need to ask key from respective teams.
Hope this helps.
- Ahmadj_283318
I imported from F5
- Ahmadj_283318
the new certificate which I have is wildcert
- RaghavendraSY
You generated CSR file from F5?
- Ahmadj_283318
yes
- Ahmadj_283318
can I use the old key?
- RaghavendraSY_7
You generated CSR file from F5?
- Ahmadj_283318
yes
- Ahmadj_283318
can I use the old key?
You have to create a certificate chain using the intermediate certificates.
Add your wildcard certificate, private key and chain in the ssl profile (client).Cheers,
Kees
- RaghavendraSY
you cannot use old key
You have to use the key that has been generated when the csr was created.
When you import the certificate (by clicking on the csr) the BIG-IP will combine them in the webgui.- Ahmadj_283318
To create sslprofile I should have certificate,key and chain so I choosed the root and old private key then the intermediate they provided me with root certificate and the intermediate certificate without the private key so because of this i am using the old private key which exist on F5
You don't need the root certificate. Only the chain of intermediates without the root. You will never receive the private key of the root and intermediates and the private key of your certificate is created the moment you generated the csr for your wildcard certificate.
- RaghavendraSY_7
you cannot use old key
You have to use the key that has been generated when the csr was created.
When you import the certificate (by clicking on the csr) the BIG-IP will combine them in the webgui.- Ahmadj_283318
To create sslprofile I should have certificate,key and chain so I choosed the root and old private key then the intermediate they provided me with root certificate and the intermediate certificate without the private key so because of this i am using the old private key which exist on F5
You don't need the root certificate. Only the chain of intermediates without the root. You will never receive the private key of the root and intermediates and the private key of your certificate is created the moment you generated the csr for your wildcard certificate.
- RaghavendraSY
SSL cert renewal steps are mentioned in
https://devcentral.f5.com/questions?pid=56681
Hope this helps
