Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Red_19's avatar
Red_19
Icon for Nimbostratus rankNimbostratus
Aug 18, 2017

TMSH commands to create cert-key-chain set

How to create cert-key-chain set on LTM using TMSH commands ? There is a K-page on how to add multiple certs to a single profile but I'd like to know how we can do it using tmsh. https://support.f5.com/csp/article/K15062

 

2 Replies

  • Hello,

     

    This command should work

     

    tmsh create ltm profile client-ssl clientssl-profile-name { cert your_cert.crt key your_cert.key chain theChainCert.crt }

     

    Please give us a feedback

     

    Regards

     

  • Red_19's avatar
    Red_19
    Icon for Nimbostratus rankNimbostratus

    So I found a solution, we can add multiple certificate and key pairs to one client-ssl profile. This can be done using the cert-key-chain set, below is the tmsh command:

     

    create ltm profile client-ssl SSL_NAME { cert-key-chain add { RSA { cert RSA.crt key RSA.key chain chain.crt } ECDSA { cert ecdsa.crt key ecdsa.key chain chain.crt } }

     

    Thanks.