Forum Discussion

alayne786's avatar
alayne786
Icon for Altostratus rankAltostratus
Feb 25, 2025

SSL Renewal / Orchestration?

What are people who use F5 LTM using for SSL ordering/orchestration/renewal? We don't have BIGIP but are running BIGIP Os 16.x.x and I see some integration in the webUI for GOdady, Digicert., etc.. But we mostly use Globalsign / Globalsign API for cert ordering. I'm hoping to have an easy/secure way to renew/order/install certs to the F5 vCMP guests from Globalsign

devops
security
ssl
  • Juergen_Mang's avatar
    Juergen_Mang
    Icon for MVP rankMVP
    Feb 25, 2025

    I use a scheduled CI/CD-Pipeline in GitLab to renew certificates. It uses the F5 Rest API to create a CSR and sign it with Certbot and Let's Encrypt.

    I do not like third party software on my F5 instances.

    • Zdenek's avatar
      Zdenek
      Icon for Cirrostratus rankCirrostratus
      Feb 25, 2025

      Yes I also use home-made solution. API calls to manage SSL stuff are quite simple and ACME with Certbot is also not a big deal