Nimbostratus
Unfortunately, an appropriate input widget for accepting a key and cert from the iApp interface doesn't exist - the best you're going to get is an xxlarge string input. To get the input from that onto disk, you'll need to use TCL's "open" command in the implementation script and stuff the cert/key into files using "puts" (and then subsequently closing the files). Then use the "sys file" commands I showed above to aim the config at it.
An alternative would be to use remote URLs in the file command and to place the key/cert pairs in a place that the BIG-IP will have access to. Then you'd just need to accept those URLs (or at least parts of them) as iApp template inputs for use with the "sys file" commands. If you do this, of course take due care not to expose your private keys to unauthorized access.
I'll make sure that an enhancement request exists for accepting key/cert data from iApp templates.
Cheers,
-Brent
