Ask a Question

Solution ID : SO21315

Last Modified : 05/02/2018

How to move SSL certificate from F5 BIG-IP to F5 BIG-IP system

Solution

To move a certificate from one F5 server to another F5 server perform the following steps:

Step 1: Export SSL Certificate and Private Key from F5.

To Export the SSL certificate:

  1. On the Main tab of the navigation pane, expand Local Traffic and click SSL certificates. This displays a list of certificates installed on the system.
  2. In the Name column, click the certificate name.
  3. At the bottom of the screen, click Export. This displays the existing SSL certificate in the Certificate Text box.
  4. From the Certificate File setting, click the Download <file_name> button.
     

To Export the Private Key:

  1. On the Main tab of the navigation pane, expand Local Traffic and click SSL certificates. This displays a list of certificates installed on the system.
  2. In the Name column, click the certificate name.
  3. On the menu bar, click Key.
  4. At the bottom of the screen, click Export. This displays the existing private key in the Key Text box.
  5. From the Key File setting, click the Download <file_name> button.
     

Step 2: Import SSL Certificate and Private Key Files into F5.

To Import the Private Key file:

  1. On the Main tab of the navigation pane, expand Local Traffic, and click SSL certificates. This displays the list of certificates installed on the system.
  2. In the upper-right area of the screen, click Import.
  3. From the Import Type list, select Key.
  4. For the Key Name setting, click Create New.
  5. In the Key Name box, type a name for the key.
  6. From the Key Source setting, click either Upload File or Paste Text. If you click:
    • Upload File, type a file name or click Browse and select the file.
    • Paste Text, copy the text from another source, and paste the text into the Key Source window.
  7. Click Import.

To import the SSL certificate file.

  1. On the Main tab of the navigation pane, expand Local Traffic, and click SSL certificates. This displays the list of certificates installed on the system.
  2. In the upper-right area of the screen, click Import.
  3. From the Import Type list, select Certificate.
  4. For the Certificate Name setting, click Create New.
  5. In the Certificate Name box, type the name for the certificate.
  6. From the Certificate Source setting, click either Upload File or Paste Text. If you click:
    • Upload File, type a file name or click Browse and select the file.
    • Paste Text, copy the text from another source and paste the text into the Certificate Source window.
  7. Click Import.

For more information on how to move SSL certificate from F5 BIG-IP to F5 BIG-IP system. Please reference to F5's url below.

http://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm_configuration_guide_10_1/ltm_ssl_certif_config.html