FavoriteLoadingAdd to favorites

To generate a Certificate Signing Request (CSR) on F5 Big IP 11.x, a key pair must be created for the server. These two items are a public/private key pair and cannot be separated. If the public/private key file or password is lost or changed before the SSL certificate is installed, the SSL certificate will need to be re-issued. The private key, CSR and certificate must all match in order for the installation to be successful.

To create a new CSR using the F5 Big IP Configuration utility, perform the steps bellow:

Step 1: Generating your CSR:

  1. Login to the F5-BIG IP console.
  2. Navigate to System > File Management > SSL Certificate List
  3. Click Create.
  4. Type a name for the certificate.
  5. From the Issuer drop down list, select Certificate Authority.
  6. Fill the form to generate the CSR.CSR F5 Big IP
    • Common name: FQDN (fully-qualified domain name) of the server (e.g., www.domain.com, mail.domain.com, or for wildcard certificate *.domain.com).
    • Division: A department name, such as ‘Information Technology’.
    • Organization: The full legal name of the organization.
    • Locality, State or Province, Country: City, state, and country where the organization is located. Do not abbreviate.
    • E-mail Address: Your email.
    • Challenge Password, Confirm Password: Enter a password.
    • The key size must be 2048 bits for all SSL Certificates.
  7. Click Finished
  8. To download the request into a file on your system, Copy the CSR from the Request Text box (including the BEGIN and END tags) as seen below:
    Paste the copied code into your enrollment portal, or save it to a text document.

Your CSR request has been created and is ready for you to copy and paste its contents into the enrollment portal.

If you are unable to use these instructions for your server, Acmetek recommends that you contact either the vendor of your software or the organization that supports it.

F5 Support:
For more information reference F5

For SSL installation instructions click Here.

FavoriteLoadingAdd to favorites

About SSLSupportDesk:

SSLSupportDesk is part of Acmetek who is a trusted advisor of security solutions and services. They provide comprehensive security solutions that include Encryption & Authentication (SSL), Endpoint Protection, Multi-factor Authentication, PKI/Digital Signing Certificates, DDOS, WAF and Malware Removal. If you are looking for security look no further. Acmetek has it all covered!

Contact an SSL Specialist to get a consultation on the Website Security Solutions that can fit your needs.

Become a Partner and create additional revenue stream while the heavy lifting for you.