Forum Discussion

Akhilesh_128432's avatar
Akhilesh_128432
Icon for Nimbostratus rankNimbostratus
Mar 09, 2016

Importing SSL certificate on F5

I have few questions regarding importing self signed certificate on F5 LB. I have generated a SSL certificate using keytool already and now am planning to use the same certificate in F5 for client SSL profile. my questions are as follows,

a) I was able to import my certificate.cer file into F5. any other steps I should take care for cer file?
b) for importing key, do i need the keep key file in any format?. password is mandatory during importing key?. I saw this              steps during importing?

Thanks, Akhi

5 Replies

    • Akhilesh_128432's avatar
      Akhilesh_128432
      Icon for Nimbostratus rankNimbostratus
      Key tool is a command in java to generate and import SSL certificate. My questions are not related to generating certificate. I had certificate and key already generated, which is a self signed certificate. My questions are more on the certificate and key format.my private key is in pkcs.8 format and I wondering will it support on F5 or any other standard format we need to convert before we upload to F5, (like pem format or pk12 format etc)
    • Kash_118367's avatar
      Kash_118367
      Icon for Nimbostratus rankNimbostratus
      You can convert into pkcs 12; Importing a PKCS 12 (IIS) file PKCS 12 is a specifically formatted archive file that is used for storing cryptographic objects in a single file. The PKCS 12 file has an extension of .PFX and is compatible with Windows IIS. To import a PKCS 12 file, perform the following steps: Note: The BIG-IP system automatically converts PKCS 12 certificates to PEM format when the files are imported. Impact of procedure: Performing the following procedures should not have a negative impact on your system. Log in to the Configuration utility. Navigate to System > File Management > SSL Certificates List. Click Import. From the Import Type list, select PKCS 12 (IIS). In the Certificate Name section, type a name for the certificate. In the Certificate Source section, click Choose File. Click Import.
    • Akhilesh_128432's avatar
      Akhilesh_128432
      Icon for Nimbostratus rankNimbostratus
      agreed, how about the private key. currently my key is in pkcs8 format. Do I need convert that or directly I can import on F5