keys repository in f5

[lami]

Hello, 

Could you please answer me, do keys stored on F5 in ciphertext or plaintext format?

Also do all F5 integrate HSM module if not is the F5 is FIPS 140-2 compliant ?

Thanks so much

[Dario_Garrido]

Hello Lami.

The location is this

Certificates --> /config/filestore/files_d/Common_d/certificate_d/*

Keys --> /config/filestore/files_d/Common_d/certificate_key_d/*

And keys could be store in plain text or cipher text (using a passphrase).

Besides this, you can use HSM (F5 supports several vendors).

REF - https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/big-ip-system-and-net-hsm-imple...

More info about FIPS support

REF - https://www.f5.com/company/certifications

Regards,

Darío.