Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

DustinW's avatar
DustinW
Icon for Nimbostratus rankNimbostratus
Aug 14, 2019
Solved

TMSH/Bash command to check which SAML: BIG-IP as IdP profile is using a specific SSL certificate

I have multiple IdP profiles using the same SSL certificate. Is there a command I can run to list the IdP profiles associated to specific certificate.   This would be similar to running 'tmsh li...
  • JG's avatar
    JG
    Aug 15, 2019

    Would the following work for you:

    tmsh -q -c "cd /; list /apm sso saml recursive" | grep -E '(idp-certificate|saml-profiles)'

    ?

DustinW's avatar
DustinW
Icon for Nimbostratus rankNimbostratus
Aug 14, 2019

Yeah okay so now seems to run although I receive no results..

Trying your original command with the added " I get the below. Have tried without .crt with same result. 

[username_admin@F5:Active:In Sync] ~ # tmsh -q -c "cd /; list /apm sso saml idp-certificate | grep CertificateName.crt"
 Syntax Error: unexpected argument "|"

Thanks for your time on this.. I have a fair few certs that are used against multiple IdP profiles and I don't want to manually go into each profile to confirm 'Security Settings' of the IdP profile.