For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

bigipjr28_13978's avatar
bigipjr28_13978
Icon for Nimbostratus rankNimbostratus
Apr 20, 2015

removing cert from ltm

Hey,

 

In the middle of doing some house cleaning on the LTMs. I am trying to remove a certificate that none of the vips use. I keep on getting "object is in use". I combed the config while grepping for it and it exists no where but the /config/filestore/files_d/Common_d/certificate_d/:Common: directory.

 

Should I delete it directly from bigip.conf ?, what is the best way of doing so ?

 

Thanks

 

application delivery
certificate
certificate store
LTM
object is in use
ssl

3 Replies

  • Techgeeeg's avatar
    Techgeeeg
    Icon for Nimbostratus rankNimbostratus
    Apr 21, 2015

    Hi,

     

    If you are getting an error this means the CERTIFICATE is in use by any one of the Virtual Servers. First of all find out where is it getting used

     

    Regards,

     

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Apr 21, 2015

    Could it be that you're looking in the wrong place? A certificate can't be in use by VS, it can only be used by a clientside or a serverside SSL profile. The recommended thing to do is to search for the occurrences in /config/bigip.conf file, you will then find out the relevant SSL profiles that use it. First detach the certificate from all the SSL profiles, then you can remove it.