Forum Discussion
cathy_123
Cirrostratus
CirrostratusRenew BIG-IP device SSL certificate
hello Team, I am going to renew our BIG-IP device SSL certificate, but this time we have GTM so we also need to update the GTM side. This is what I am planning
- Renew the BIG-IP device SSL certificate via cli on config/httpd/conf/ssl.crt/server.crt
- Restart the httpd service
- I am planning to update the GTM via GUI DNS -> GSLB -> Servers -> Trusted Server certificates -> Import -> Append -> paste the new cert
- Restart the big3d and gtm service
Question is, is this correct way? also will this also update my cert on big3d (/config/big3d/client.crt)? If not, do I need to update the cert on big3d?
Thank you!
- Aswin_mk
Cumulonimbus
Hello cathy_123
Please go through below KB, its show how to renew the SSL in All big ip - Changing the BIG-IP system device certificate using the Configuration utility
You must reinitialize the iQuery connection to use the new device certificate by restarting the gtmd and big3d processes. You can use the following procedure to restart gtmd and big3d.
BR
Aswin
cathy_123thanks Aswin
