Install Ssl On F5 Big Ip

4 days ago
Admin
2 minutes

F5 BIG-IP SSL Certificate Installation

Install your SSL Certificate to a f5 BIG-IP Loadbalancer (version 9)

Installing the SSL Certificate

  1. Launch the F5 BIGIP web GUI.
  2. Under Local Traffic select “SSL Certificates.”
  3. Proceed by clicking the name you assigned to the certificate under “General Properties” while creating the CSR.
  4. Browse to the your_domain_name.crt file that you received from CA.
  5. Proceed by clicking “Open” and then “Import.”

Your SSL Certificate file is now installed.

Enabling your Intermediate Certificate

  1. In the web GUI, choose “Local Traffic,” then “SSL Certificates,” and then “Import.”
  2. Under “Import Type,” choose Certificate, then “Create New.”
  3. Add “any_name” as your certificate name.
  4. Browse to the chain.crt file that you received from CA, Proceed by clicking “Open,” and then “Import.”

Your intermediate certificate should now be imported.

Configure your server for SSL

  1. Create or open the SSL Profile that you will be using with this certificate.
  2. Log in to the Configuration utility > Local Traffic > Profiles > Client (from the SSL menu), then select the client to configure and choose “Advanced” from the Configuration menu.
  3. Select the SSL certificate (public/private key pair) that you installed at the beginning of these instructions.
  4. Under the “Chain” section, browse to the “any_name” file that you imported in the previous step, then save and exit the configuration

Your SSL Certificate has now been installed and enabled for use on your server.

f5 BIG-IP Pre Version 9.x

You will need the Primary (your_domain_name.crt) and Intermediate (chain.crt) certificate files. You will need both of these files for proper installation on you BIG-IP device. You do not need the TrustedRoot.crt file

  1. Move your Primary and Intermediate Certificates to the BIG-IP device.

    The Primary (your_domain_name.crt) and Intermediate (intermediate-ca.crt) certificate files can be moved to the BIG-IP box using FTP.
  2. Rename and move the certificate files.

    Rename your Primary certificate from your_domain_name.crt to your.domain.name.crt and copy it to the /config/bigconfig/ssl.crt/ folder.

    Copy the intermediate-ca.crt to the /config/bigconfig/ssl.crt/ folder.

  3. Restart the Proxy.

    # bigpipe proxy <IP Address>:443 disable
    # bigpipe proxy <IP Address>:443 enable

    The Certificate is now installed.