Forum Discussion
Replacing the Configuration utility's self-signed device certificate with a CA-signed Certificate
Hi,
As part of vulnerability scan open point in our environment, there is one open point to "install a server certificate signed by a trusted third-party Certificate Authority".
Please let me know the configuration steps required to replace configuration utility's self-signed device certificate with a CA-signed Certificate.
If you are referring to the SSL cert that is used when logging into the GUI I believe the following article is what you are looking for. It is important that you create a backup of the SSL cert and key before changing them which can by done by typing the following.
cd /config/httpd/conf/ssl.crt/server.crt
cp server.crt server.crt.bakcd /config/httpd/conf/ssl.key/server.key
cp server.key server.key.bak
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com