Forum Discussion

sandiksk_35282's avatar
sandiksk_35282
Icon for Altostratus rankAltostratus
Aug 04, 2016

How to generate a CSR and private key on F5 for a specific VIP

We have a an application where we need to perform ssl offload on F5 . Client ---- F5 HTTPS F5 ----- Server HTTP

 

I am trying to generate a CSR on F5 and get it signed by the third party ( Symantec). Inorder to generate a CSR , how do I create a key pair on F5.

 

Please assist me on this

 

5 Replies

  • Under System --> File Management --> SSL Certificate List , select Create. Ensure that you choose "Certificate Authority" under Issuer. Note that the Certificate Properties such as Organization and Locality must match what is configured in your Symantec account.

     

    When you select "Finish", you will receive a CSR that you'll input in your Symantec dashboard, and the private key will show up in your Certificate List.

     

    Once you receive the Cert back, import it. Create an SSL profile, assign the cert to it, and assign the SSL profile to the VIP.

     

  • will it be the same process for trend micro , copy the CSR have it on their dash board once I get the key and certificate import it to F5.

     

  • will it be the same process for trend micro , copy the CSR have it on their dash board once I get the key and certificate import it to F5.

     

  • you won't get the key, with creating a CSR you create a key and an unsigned certificate. you submit that unsigned certificate and get it back signed. then you import that.

     

  • If you dont' fancy the GUI.

     

    You could also use the CLI

     

    https://www.sslshopper.com/article-most-common-openssl-commands.html