F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Ahmad_Mohaidat_'s avatar
Ahmad_Mohaidat_
Icon for Nimbostratus rankNimbostratus
Jan 05, 2014

VeriSign Certificate for SSL Profile (missing Key)

Dears,

 

We Have a VeriSign certificate that we need to use on our ASM for a client SSL profile, the server team sent me the .PEM file and i imported it to the ASM.

 

when i go to system>>File management>>SSL Certificates list , i see the contents of the file as "certificate" not "Certificate & Key".

 

because of that i'm not able to create the Client SLL profile as i still need the Key.

 

I don't have that much knowledge with the Certificates and the server team claims that this is what they got from VeriSign website.

 

I'm not sure if the key should be included in the same .PEM file or if there is something that we need to do on the ASM to fix this issue.

 

your help is much appreciated Ahmad.

 

3 Replies

  • Open up the PEM file in a text editor and see if the private key is there. The certificate section will begin and end with -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- respectively, and the private key section will begin with -----BEGIN RSA PRIVATE KEY----- If you do see the private key section, then extract those two sections to separate text files, import the key first, and then the certificate.

     

    If you don't see the private key section, then you'll need to go back to the server team and/or Verisign to get the key.

     

  • Thanks Kevin for your help , I don't see the private key section in the file , I will ask the server team to double check again.

     

  • Openssl x509 -in name.pem -out name.crt openssl rsa -in name.pem -out name.key

     

    copy the pem file in to a directory run the above command you will get name.crt/name.key bind the key and cert with profile.