For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Peter_Bevington's avatar
Peter_Bevington
Icon for Nimbostratus rankNimbostratus
Nov 14, 2017

SSL Certs Renew vs. ReIssue (replace)

We have previously just renewed certificated by generating CRS and then submitting to our in house team to supply a new certificate. That team have now replaced the environment with a PKI managed one...
application delivery
certificate
LTM
ssl
TMSH
Peter_Bevington's avatar
Peter_Bevington
Icon for Nimbostratus rankNimbostratus
Nov 16, 2017

Using a .p12 allows the replacement of the cert and key pair where using a .pem file does not, odd but true.

 

For syntax see: https://support.f5.com/csp/article/K154625

 

11.5.0 and later: install sys crypto pkcs12 .p12 from-local-file /shared/tmp/.p12 passphrase

 

 

11.0.0 - 11.4.1: install sys crypto pkcs12 .p12 from-local-file /shared/tmp/.p12 prompt-for-password