Regenerate device identity certificate without using the GUI

Question

Is there any way to regenerate the device identity cert via tmsh, SOAP, or REST?&nbsp;
When you change the device name in the GUI it allows you to select "Generate a new self signed authority" as well as "Specify a User Defined Authority".  Are there tmsh equivalents of this?&nbsp;

leonardo_souza · Answer

You can do via openssl, see this solution:&nbsp;
https://support.f5.com/kb/en-us/solutions/public/7000/700/sol7754.html&nbsp;
I had quick look using tmsh, and does not look like is possible via tmsh.
I doubt you can do with iControl SOAP.
iControl REST works on top of tmsh, so if tmsh does not have the command REST will not have.&nbsp;

Forum Discussion

Regenerate device identity certificate without using the GUI

1 Reply

Recent Discussions

ASM instance creation

[ASM] - what is "Browser Challange file" ?

[ASM] - HTML5 Cross-Domain Request Enforcement - CLI command

Reverse Proxy Not Behaving

Stable Firmware for F5

Related Content

Zero Trust building blocks - Machine Identity Management (MIM) and Workload Protection

Re: Management Certificate

Automating ACMEv2 Certificate Management on BIG-IP

F5 APM as Service Provider (SP) and Microsoft AzureAD as Identity Provider (IDP)

Automate Let's Encrypt Certificates on BIG-IP