Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 

Replacing the Configuration utility's self-signed device certificate with a CA-signed Certificate

Preet_pk
Altostratus
Altostratus

Hi,

As part of vulnerability scan open point in our environment, there is one open point to "install a server certificate signed by a trusted third-party Certificate Authority".

Please let me know the configuration steps required to replace configuration utility's self-signed device certificate with a CA-signed Certificate.

 

2 REPLIES 2

Paulius
MVP
MVP

If you are referring to the SSL cert that is used when logging into the GUI I believe the following article is what you are looking for. It is important that you create a backup of the SSL cert and key before changing them which can by done by typing the following.

cd /config/httpd/conf/ssl.crt/server.crt
cp server.crt server.crt.bak

cd /config/httpd/conf/ssl.key/server.key
cp server.key server.key.bak

https://support.f5.com/csp/article/K42531434#replace