For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

DustinW's avatar
DustinW
Icon for Nimbostratus rankNimbostratus
Aug 15, 2019
Solved

TMSH/Bash command to check which SAML: BIG-IP as IdP profile is using a specific SSL certificate

I have multiple IdP profiles using the same SSL certificate. Is there a command I can run to list the IdP profiles associated to specific certificate.   This would be similar to running 'tmsh li...
  • JG's avatar
    JG
    Aug 16, 2019

    Would the following work for you:

    tmsh -q -c "cd /; list /apm sso saml recursive" | grep -E '(idp-certificate|saml-profiles)'

    ?

JG's avatar
JG
Icon for Cumulonimbus rankCumulonimbus
Aug 16, 2019

Would the following work for you:

tmsh -q -c "cd /; list /apm sso saml recursive" | grep -E '(idp-certificate|saml-profiles)'

?

  • DustinW's avatar
    DustinW
    Icon for Nimbostratus rankNimbostratus
    Aug 16, 2019

    Def looking better. The above retrieves me a list of 'entity-ids' that use the specified 'idp-certificate'.

    I can pretty easily match these to the IdP profiles. I'm pretty happy with this result and am happy to continue to use the above to search the profiles moving forward. Your help with this is appreciated.

     

    Cheers.