Venafi Integrations

My organization has recent experience with Venafi Trust Protection Platform, specifically with provisioning certificates to LTM devices. Venafi has been efficient and consistent at this task. The tool specifies a number of options, from basic provisioning of just pushing out a certificate and private key, all the way through configuring specific SSL Profiles, Virtual servers, etc. Venafi is even aware of F5 High Availability settings and can trigger config syncs between configured devices.

 

Venafi can automatically push out new certificates upon renewal, or can do manual certificates pushes to the F5s as needed. There are even more options available, but I have not had the opportunity to test them all myself.

 

Hi Sulaiman We have recently gone live with Venafi Trust Protection Platform for our F5 team which replaced an archaic process. They have welcomed Venafi into their workflow because of the automation component as well as for the expiration monitoring. The renewal of the certificates is configured to be automated and the installation of the certificates on the LTM happens with a click of a button during the change window. The newer version of Venafi even has scheduled installations to further automate the process during change windows.

Anyone out there doing this and running GTM? If so, how are you handling upgrading LTM device certs and the GTM via Venafi?

 

D