Securing SSL Keys on your BIG-IP

, for sure you want to make sure you have the passphrases documented, "written down" might imply a sticky note on your monitor - that may not be the best. 🙂

I will say, the passphrase on the key is stored within the config but it is protected by the master key - you don't actually need the Master Key itself to access the keys in the BIG-IP configuration. The passphrase on the key itself is the only thing that the BIG-IP user needs.

Thanx for the feedback!