Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

David_Pearson_1's avatar
David_Pearson_1
Icon for Nimbostratus rankNimbostratus
Sep 06, 2018

SSL Certificate Issue

Certificate Issue, I had a message from our certificate authority   "As per Google’s blog post, you will need to replace all certificates which were issued before December 1 2017 by Symantec, Thaw...
application delivery
big-ip
LTM
Philip_Jonsson's avatar
Philip_Jonsson
Icon for MVP rankMVP
Sep 06, 2018

Because the issue is related to the PKI infrastructure of Symantec, Thawte, GeoTrust and RapidSSL, to be on the safe side I'd generate a CSR to create a completely new certificate/key pair.

 

https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html

 

Since the key is generated by the old PKI infrastructure I'm not even sure it will work to use the same key but with the new certificate. Correct me if I'm wrong. :)