SSL Certificate import

here we go,

Key---When using this procedure to import a new SSL key. its could be any text file or cert file. we only need to import key without any password. This method is used for private key upload.

certificate :- when you received a bundled cert folder with root and client cert and server vert bundle. The SSL certificate can be either a self-signed certificate or a trusted Certificate Authority (CA) certificate.

PKCS 12 --is used for .pfx file format with password .

A certificate revocation list (CRL) is a list of certificates that have been revoked. If you plan to upload the CRL using the Paste Text option, you should copy and paste the certificate into a text file using a text editor. The PEM CRL format uses the header and footer lines as follows:

-----BEGIN X509 CRL-----

[encoded data]

-----END X509 CRL-----

To import a CRL file using the Configuration utility, perform the following procedure:

Impact of procedure: Performing the following procedures should not have a negative impact on your system.

Log in to the Configuration utility. Navigate to the SSL Certificate List: BIG-IP 13.0.0 and later:

System > Certificate Management > Traffic Certificate Management > SSL Certificate List

BIG-IP 12.1.2 and earlier:

System > File Management > SSL Certificate List

Click Import. From the Import Type list, select Certificate Revocation List. In the Certificate Revocation List Name section, type a name for the file. In the Certificate Revocation List Source section, click either Upload File or Paste Text. Click Import.

Achive--You can generate an SSL certificate/key archive file and then download the file to your local hard drive. The file is saved in the .tgz format.