For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ajeet_Gupta's avatar
Ajeet_Gupta
Icon for Nimbostratus rankNimbostratus
Feb 21, 2020

Replace BIG IP self signed device certificate with CA signed device certificate

Hi Guys,   We have LTM, DNS, Viprion Hosts and Guests in which running device certificates are self signed. We have to replace these all self signed device certificate with CA signed device certi...
application delivery
BIG-IP DNS
LTM
security
Grumpy_Cat's avatar
Grumpy_Cat
Icon for Cirrus rankCirrus
Feb 21, 2020

Hi Ajeet,

 

This article covers how to replace the default device cert with a CA signed cert:

https://support.f5.com/csp/article/K42531434#replace

Covers iQuery comms as well. It's the same process where you'll need to add the new cert into their trusted device cert either using the bigip_add script or manually importing via TMUI.

 

Make sure the new SSL cert is not a wildcard otherwise comms will fail.

 

Let me know if you need anything else.

 

Kind regards

Ben