Import SSL Cert

Forums Technical Forums
, ,
1

How to import SSL cert bundles and keychains to another LTM?

2

Ref: 404 Page not found | BIG-IP Documentation

Section ‘Importing an SSL certificate’

First you export the certificate or private key as .txt (Ctrl + C for copy), and then you import it to another BigIP as txt (Ctrl + V paste). It’s a lot more complicated with FIPS module, but I assume you don’t use it.

3

Ref: 404 Page not found | BIG-IP Documentation

Section ‘Importing an SSL certificate’

First you export the certificate or private key as .txt (Ctrl + C for copy), and then you import it to another BigIP as txt (Ctrl + V paste). It’s a lot more complicated with FIPS module, but I assume you don’t use it.

4

What about key chains and certificate bundles?

5

What about key chains and certificate bundles?

6

I am trying to import my SSL certs from one LTM to another LTM. I am able to import the single certs, however trying to figure out how to import the bundle certs.

7

I am trying to import my SSL certs from one LTM to another LTM. I am able to import the single certs, however trying to figure out how to import the bundle certs.

8

Hi Newbief5,

It very easy to import though GUI.

System-->File Management--> SSL --> Import--> Select “cert” & fill details.

9

Exactly the same way, there’s no difference in the procedure if you use the copy/paste method. If you export as files, you will need to paste each of the individual certificates (one after another) to a notepad file, and then import that merged result. Notice that in a single certificate you have one BEGIN and one END tag; in a bundle cert, you have more.

10

Exactly the same way, there’s no difference in the procedure if you use the copy/paste method. If you export as files, you will need to paste each of the individual certificates (one after another) to a notepad file, and then import that merged result. Notice that in a single certificate you have one BEGIN and one END tag; in a bundle cert, you have more.

11

What I am currently doing is exporting the certs one by one. This is working well, however- when I come to the bundled certs, the export button does not take to me to the download cert page as do the other certs.

12

What I am currently doing is exporting the certs one by one. This is working well, however- when I come to the bundled certs, the export button does not take to me to the download cert page as do the other certs.

13

Hi,

There is a risk way to import all SSL to a new LTM.

  1. Take a UCS file of your old LTM.
  2. Take the master key of your old
bash
f5mku –K

(Copy that)

  1. reKey your new LTM with the old LTM’s key
f5mku –r <paste the masterkey of your old LTM>
  1. Import the UCS file from your old LTM to your new LTM
  2. Restore the UCS file on your new LTM:
tmsh load sys ucs <name of ucs>.ucs no-license no-platform-check reset-trust
  1. Deleting all other configuration elements that you don’t want
  2. All SSL profiles will be there.

Do not do this if the new LTM is already productive. This procedure is applicable just if you need all SSL on another LTM no matter what.

14

ucs doesn’t contain SSL Key & cert file. If you need to move all key/cert to other LTM system then use archive method.

15

Something wrong with the GUI then. Try ‘bigstart restart httpd’ and wait 1 min. If you’re still stuck, fetch the bundle certificate via command line at ‘/config/filestore/files_d/Common_d/certificate_d/Prefix-your-cert-name’

16

Something wrong with the GUI then. Try ‘bigstart restart httpd’ and wait 1 min. If you’re still stuck, fetch the bundle certificate via command line at ‘/config/filestore/files_d/Common_d/certificate_d/Prefix-your-cert-name’

17

hi , you can download the keys, cert to your local host and import to the new LTM device

18

hi , you can download the keys, cert to your local host and import to the new LTM device

19

Hi Samir Jha, I’ve done this several times, and yes it is possible.