Certificate Installation: F5 BigIP

Installing a certificate on F5 Big-IP Appliances

You will have received your certificate file from us, usually named 'your_domain_com.crt' and intermediate certificate certificate, named 'TrustedSecureCertificateAuthority.crt'The root certificate 'EntrustSecureServerCA.crt' may also be provided.

Copy the file(s) you received to the server.

F5 BigIP version 9 and later

1. Open and log into the BigIP web interface.



2. Under the 'Local Traffic' menu, select 'SSL Certificates'. Under 'General Properties' click on the name you assigned when generating the CSR.



3. Browse to the certificate file 'you_domain_com.crt' you received, click 'Open' then click 'Import'.



4. Return to the 'Local Traffic' menu, and again select 'SSL Certificates'. Click 'Import'.



5. Under 'Import Type', select 'Certificate' and click 'Create New'. Enter the name 'CSC Trusted SecureRootCA'.



6. Browse to the intermediate certificate file 'TrustedSecureCertificateAuthority.crt', click 'Open' and then 'Import'.



7. Finally, configure your certificate for use. Go to the SSL Profile that you require the certificate for. Click 'Configuration' then 'Advanced'.



8. Choose the certificate that you installed in Step 3.



9. Under the section labelled 'Chain', choose the 'CSC Trusted SecureRootCA' you imported in Step 5.



10. Save the configuration and exit. The certificate installation and setup is complete.

F5 BigIP version 4.x

1. You should have been provided with a 'ca bundle' file, named 'your_domain_com.cabundle'. If not, this can be downloaded from here: http://www.csctrustedsecure.com/root_intermediate.html



2. Copy the 'ca bundle' file and the certificate file ('your_domain_com.crt') to the Big-IP Appliance.



3. Rename the 'your_domain_com.crt' certificate file to 'your.domain.com.crt' and move it into the folder: /config/bigconfig/ssl.crt/



4. Rename the 'ca bundle file to 'intermediate-ca.crt' if it is not already, and move the file to the folder: /config/bigconfig/ssl.crt/



5. Finally, execute the below two commands to install the certificate:

   # bigpipe proxy :443 disable
   # bigpipe proxy :443 enable