Where is the location of CSR at F5 CLI

Question

Where is the location of CSR at F5 CLI. I would like to see the location and command to find a CSR from F5 CLI&nbsp;

paulius · Answer

f5Subrun It depends on which CSR you're looking for. Is this for the device SSL cert in the GUI or is this for SSL certs for terminating HTTPS on the F5?

f51 · Answer

Hi,&nbsp;CSR Directory:cd /config/ssl/ssl.csr/&nbsp;Follow the article to how to manage the certshttps://my.f5.com/manage/s/article/K15462#:~:text=Therefore%2C%20F5%20recommends%20that%20you,change%20to%20the%20filestore%20directory.&amp;text=Find%20the%20newly%20signed%20CSR,and%20continue%20to%20step%205.&amp;text=To%20import%20the%20certificate%20that,the%20.&nbsp;

aswin_mk · Answer

HI,&nbsp;try the command - tmsh show /config/bigconfig/ssl.csr/&nbsp;BRAswin

f5_design_engineer · Answer

Hi f5Suburn,
&nbsp;
In BASH Mode Try following
&nbsp;
tmsh list sys crypto cert all
tmsh list sys crypto csr
to list all the cert/key/csr etc etc for all the partitions recursively use the following master command id more partitions other than /Commontmsh -q -c "cd / ; list sys crypto recursive all-properties "
&nbsp;
In TMSH Mode try following
if only one partition or you want to run on individual partition use this in TMS Mode
&nbsp;
list sys crypto recursive all-properties
&nbsp;
&nbsp;
list sys crypto cert
list sys crypto crl
list sys crypto csr
list sys crypto key
&nbsp;
show sys crypto
Very Limited output
*****************************************************
root@(Test-Box1-Active)(cfg-sync In Sync)(/S1-green-P::Standby)(/Common)(tmos)# show sys crypto15 certificates found0 certificate revocation lists found3 CSRs found9 keys foundFIPS 140 is not licensed.
--------------------------------------Sys::Crypto Acceleration Distribution:--------------------------------------Primitive &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Forced CPU &nbsp;TotalECDH &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;14 &nbsp; &nbsp; 14ECDSA Sign &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; &nbsp;0RSA encrypt/verify &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 0 &nbsp; &nbsp; 28
-----------------------------------------------------------------------------------------------------------------------------Sys::Encrypted AttributesObject Type &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Object Name &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Attribute &nbsp; &nbsp; Valid Encryption-----------------------------------------------------------------------------------------------------------------------------profile_serverssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ****SCRUBBED-DUE-TO_PRIVACY****.com-serverssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;passphrase &nbsp; &nbsp;1profile_sctp &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;sctp &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; secret &nbsp; &nbsp; &nbsp; &nbsp;1profile_clientssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ****SCRUBBED-DUE-TO_PRIVACY****.com &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;passphrase &nbsp; &nbsp;1profile_clientssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ****SCRUBBED-DUE-TO_PRIVACY****.com-clientssl &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;passphrase &nbsp; &nbsp;1clientssl_certkeychain &nbsp; &nbsp; &nbsp;****SCRUBBED-DUE-TO_PRIVACY****.com-clientssl 2023-CER-****SCRUBBED-DUE-TO_PRIVACY****_Private_CA_2022_0 &nbsp;passphrase &nbsp; &nbsp;1clientssl_certkeychain &nbsp; &nbsp; &nbsp;****SCRUBBED-DUE-TO_PRIVACY****.com 2016-CER-****SCRUBBED-DUE-TO_PRIVACY****.com &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; passphrase &nbsp; &nbsp;1auth_tacacs_config &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;system-auth &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;secret &nbsp; &nbsp; &nbsp; &nbsp;1app_cloud_security_service &nbsp;f5-credential-stuffing-cloud-app &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; access_token &nbsp;1app_cloud_security_service &nbsp;f5-global-cloud-app &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;access_token &nbsp;1-----------------------------------------------------------------------------------------------------------Sys::Master-Key-----------------------------------------------------------------------------------------------------------master-key hash &nbsp;&lt;****SCRUBBED-DUE-TO_PRIVACY****==&gt;previous hash &nbsp; &nbsp;&lt;****SCRUBBED-DUE-TO_PRIVACY****==&gt;
root@(Test-Box1-Active)(cfg-sync In Sync)(/S1-green-P::Standby)(/Common)(tmos)#
*****************************************************************************************************
For CLI Path to CSR folder use cd command and use TAB for autocomplete in case if you are not sure of
&nbsp;
root@(Test-Box1-Active)(cfg-sync In Sync)(/S1-green-P::Standby)(/Common)(tmos)#
root@(Test-Box1-Active)(cfg-sync In Sync)(/S1-green-P::Standby)(/Common)(tmos)# bash
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ~ # cd /config/s
snmp/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ssh/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ssl/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; startup&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; statsd.conf
&nbsp;
&nbsp;
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ~ # cd /config/ssl/
.f5km-lastlog&nbsp; ssl.crl/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ssl.crt/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ssl.csr/&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ssl.key/
&nbsp;
&nbsp;
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ~ # cd /config/ssl/ssl.csr/
&nbsp;
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ssl.csr # ls
2015-***-****.***.com.csr
&nbsp;
&nbsp;
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ssl.csr # ls -la
total 12
drwxr-xr-x. 2 root root 4096 Nov&nbsp; 4 14:03 .
drwxr-xr-x. 6 root root 4096 Oct&nbsp; 9 18:51 ..
-rw-r--r--. 1 root root 1541 Dec 11&nbsp; 2015 2015-***-****.***.com.csr
&nbsp;
&nbsp;
[root@Test-Box1-Active:/S1-green-P::Standby:In Sync] ssl.csr #
To read the content of the csr file either use list command or to read the file use cat command.
&nbsp;
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/DEV)(tmos)# list sys crypto
Options:
&nbsp; all-properties&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; current-module&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; non-default-properties&nbsp;&nbsp; one-line&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; recursive&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Modules:
&nbsp; cert-validator&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; fips&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Components:
&nbsp; acceleration-strategy&nbsp;&nbsp;&nbsp; allow-key-export&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ca-bundle-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cert&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cert-order-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; client&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; crl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; csr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; server&nbsp;&nbsp;&nbsp;
&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/DEV)(tmos)# list sys crypto cert
Modules:
&nbsp; cert-validator&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Components:
&nbsp; cert&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cert-order-manager&nbsp;&nbsp;
&nbsp;
&nbsp;
&nbsp;
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/DEV)(tmos)# list sys crypto cert
Options:
&nbsp; all&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Properties:
&nbsp; app-service&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; fingerprint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; {&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Configuration Items:
&nbsp; 2022-CER-********************&nbsp;&nbsp; 2023-CER-*************.com&nbsp;&nbsp; 
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/DEV)(tmos)# list sys crypto cert ?
Options:
&nbsp; all&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Apply the command to all configuration items
&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Route command output to a filter
Identifier:
&nbsp; [object identifier]&nbsp; Certificate name/identifier
Properties:
&nbsp; "{"&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Optional delimiter
&nbsp; app-service
&nbsp; fingerprint&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Displays the SHA-256 fingerprint of the certificate.
&nbsp;
&nbsp;
&nbsp;
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/DEV)(tmos)#
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/Common)(tmos)# list sys crypto
Options:
&nbsp; all-properties&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; current-module&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; non-default-properties&nbsp;&nbsp; one-line&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; recursive&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; |&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Modules:
&nbsp; cert-validator&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; fips&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
Components:
&nbsp; acceleration-strategy&nbsp;&nbsp;&nbsp; allow-key-export&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ca-bundle-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cert&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; cert-order-manager&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; client&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; crl&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; csr&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; key&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; server
&nbsp;
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
TestAdmin1@(Test-Box1-Active)(cfg-sync In Sync)(/S2-green-P::Active)(/Common)(tmos)# list sys crypto all-properties
====================================
Output has been Omitted due to Privacy reason
&nbsp;
===================================
&nbsp;
for GUI I always use to connect my f5 boxes using WINSCP
&nbsp;
&nbsp;
&nbsp;
When you select in WinSCP protocol SCP, you are not able to list folder content. This is cause because by default, you have access to TMSH and not to bash.
Recommended Actions
Reconfiguration of WinSCP.1) Save your session in WinSCP

2) In Edit -&gt; Advanced -&gt; "Environment -&gt; SCP/Shell" -&gt; in shell field - manually put only "bash" command (do not select "/bin/bash")

&nbsp;

3) Save profile
&nbsp;
Additional InformationAccess to list files via WinSCP and SCP protocol require using Administrator Role user (user need to be able to jump from tmos to bash when is connected via SSH).
Kindly rate if it helps.
F5 Design Engineer
&nbsp;

Forum Discussion

Where is the location of CSR at F5 CLI

Recent Discussions

UCS backup not loading Big IP DNS pool

Application only need to access from 2 uris

XC Bot defense question

In Radius auth, how to allow second attempt of token input when the first input is incorrect?

BIG-IP Oauth Client and AS

Related Content

F5 BIG-IP Boot location

redirect to to 301 location

Rewriting Location Header in iRule

Protect an application spread across several locations with F5 XC WAAP and Multi-Cloud Networking

rewrite the location in 302 response

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS