For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

waterfall_10467's avatar
waterfall_10467
Icon for Altostratus rankAltostratus
May 02, 2013

SSL_CERTIFICATE

Hello,   İ've recently gotten request from our core securtiy team about ssl certificate that has been impoterted on the F5. They told me that the certificates have to be none exportable according ...
config
design
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 03, 2013
The only way to prevent exportability of private keys on the BIG-IP is to store them in a FIPS module. Yes, you can still export private keys from FIPS, but they are in a proprietary encrypted format.