For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

AJ_6093's avatar
AJ_6093
Icon for Nimbostratus rankNimbostratus
Sep 09, 2008

SSL certificate renew ?

Hi,

 

 

the SSL certificate in BIG IP 1000 is going to expire, so update is being prepared. this time we will take it from a certification organization which is different from current organization.

 

 

Please tell if:

 

1. Is new CSR necessary? If new one is necessary, please tell how to issue new CSR?

 

2. When you set the SSL certificate to Load Balancer, does communication down occur?

 

 

 

 

Thanks & Regards,

 

Arijit

 

app sec
BIG-IP Access Policy Manager (APM)
security

1 Reply

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Sep 11, 2008
    Hi Arijit,

     

     

    I think you can use the existing CSR assuming none of the cert fields need to be modified. You can send the CSR to a cert authority to get a new cert.

     

     

    Are you running 9.x or 4.x? You can search AskF5.com for CSR or install certificate, filtering for your version to get instructions on generating a CSR and/or installing a new certificate. There shouldn't be downtime associated with the change, though you could do the work during a maintenance window to be safe.

     

     

    Aaron