For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

computerli's avatar
computerli
Icon for Altostratus rankAltostratus
8 years ago

Update device certificate

I originally configured the device certificate using "self" option and also created the Device trust using this self issued certificate on active/standby units.   My company recently implemented n...
application delivery
LTM
Anoop's avatar
Anoop
Icon for Nimbostratus rankNimbostratus
8 years ago

Under Device Management ›› Device Trust : Local Domain you would see dtca.crt which is the CA root certificate for the trust network. Same can be found at /config/ssl/ssl.crt/dtca.crt from command line. BIG-IP systems use the trust architecture to provide a secure framework for configuration synchronization (ConfigSync) and other high availability (HA) features, such as failover for BIG-IP device groups. When the device group components are properly defined, the device group members establish a secure communication channel using SSL certificates to accommodate device group communication and synchronization. You can visit https://support.f5.com/csp/article/K15664ui more more details