Forum Discussion

tlian_321947's avatar
tlian_321947
Icon for Nimbostratus rankNimbostratus
Feb 26, 2018

How to create an SSL profile with certificates and keys managed by Venafi

QUESTION on F5 and Venifi integration

In my current scenario, had to create a VIP with an SSL profile. The SSL profile had to be created first with SSL key&cert before a VIP can be created. In the near future, the team is moving to Venafi. How would the VIP creation would look like now?

Is F5 able to see all the SSL Certs and Keys in Venifi and use them?

[or]

Would it need to tell Venifi to insert the Certs and Key after creating the VIP?

devops
LTM
security

1 Reply

Sort By
  • rob_carr's avatar
    rob_carr
    Icon for Cirrostratus rankCirrostratus
    Feb 28, 2018

    It looks like the Venafi understands objects like virtual servers, profiles and associated certificates on the F5. From the Venafi Partner Brief on F5:

     

    "Here’s how the joint solution works. To streamline certificate management for F5, the Venafi Platform discovers and auto-creates objects that represent every virtual server (VIP) including unique settings, such as SSL Profile, Certificates, Root Bundles, and more. This allows you to rotate keys in bulk in just a couple of clicks. For example, this would allow you to rotate hundreds of certificate keys on your F5 solutions from SHA1 to SHA2 in a matter of hours, not days or weeks. Plus, the Venafi platform automatically creates and updates the certificate inventory and associated configuration, vastly reducing time and effort required to provision certificates."