Forum Discussion

Ripkey_120880's avatar
Ripkey_120880
Icon for Nimbostratus rankNimbostratus
Jan 30, 2014

Bulk move SSL Certs

Hi, I'm currently doing an LTM migration from 2 3400's running 10.2.2 to a new pair running 11.4.1. I was wondering if there is a way to bulk export all the certs and then import them into the new L...
deployment
Anthony_Pineda_'s avatar
Anthony_Pineda_
Icon for Nimbostratus rankNimbostratus
Apr 17, 2015

On my v11.2 box, I saved the config using SCF, i.e. tmsh save sys config file and it created two files for me on /var/local/scf. One contains the configuration files and the other the certficates. I guess you can SCP the contents of the tar file into /var/tmp of the new BIGIP system and run the script above by Kevin K to properly install the SSL cert and keys. It would be nice if F5 can actually do these as part of Enterprise Manager or just as an option under System on a regular appliance.

 

  • Rocky's avatar
    Rocky
    Icon for Nimbostratus rankNimbostratus
    Apr 19, 2017

    Hi Guys, When I import the UCS the, the import failed due to hardware differences (from 6900 to 7250v). I have manually copied the ssl certs and keys however the naming is different. It shows as name.key_15147_1.key and name.crt_15089_1.crt. Why is it showing numbers instead of just .crt or .key? When I load it, it displays as separate key and certs in the GUI under SSL certs (RSA key separate and cert separate in two lines) It should be combined. Is there anyway I can import/load the ssl certs and keys without any issues. Any help is appreciated.

     

    Thanks,