For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pihu_294516's avatar
Pihu_294516
Icon for Altostratus rankAltostratus
Jun 06, 2018

SSL Certificate import

Trying to understand which import type to use to import a cert on F5? Under what criteria do we use a specific import type?  
application delivery
BIG-IP
LTM
Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Jun 08, 2018

Thanks Dali,

 

So in PFX case I have bundled which includes SSL certificate and Key so I just needs to import it right.

 

what about root certificate , how I can get that I thought its in same PFX bundled like it includes SSL Client cert, root cert and Key

 

  • Dali_Chauhan_33's avatar
    Dali_Chauhan_33
    Icon for Nimbostratus rankNimbostratus
    Jun 11, 2018

    cer - certificate stored in the X.509 standard format. This certificate contains information about the certificate's owner... along with public and private keys.

     

    when you import root certificate the file method is RSA Certificate & Key or simply RSA certificate(in case of no key)

     

    pfx - stands for personal exchange format. It is used to exchange public and private objects in a single file. A pfx file can be created from .cer file. Can also be used to create a Software Publisher Certificate.

     

    what exactly do you what to know? certificate installation in f-5 OR how cert works ?

     

  • Anju's avatar
    Anju
    Icon for Altostratus rankAltostratus
    Jul 24, 2018

    Thanks for the reply Dali Chauhan, Can you please share the link or can explain how the cert is installed on F5 and how it works?

     

  • Stephane_Viau's avatar
    Stephane_Viau
    Icon for Nimbostratus rankNimbostratus
    Jul 24, 2018

    There is no such thing as a "cert" format. Your certificate could be in PEM format (base64 ASCII, most popular format and the only format supported by the BigIP), DER format (binary, not supported, need to be converted to PEM with a tool like OpenSSL) or PKCS12 (binary, used mostly by Microsoft folks, can be imported as the BigIP will convert it to PEM).

     

  • Korai_331784's avatar
    Korai_331784
    Icon for Altostratus rankAltostratus
    Jul 29, 2018

    oK thanks,

     

    I have successfully added SSL certs in PEM format and it works.

     

    One more question, Can I use same SSL cert in our another F5 node.