CSR Generation: F5 BigIP

Generating a Certificate Signing Request (CSR) using F5 BigIP Appliances

To generate your CSR, you will need to use the following instructions depending on your version of the BigIP software.

F5 BigIP version 9 and later

1. Open and log into the BigIP web interface.
2. Under the 'Local Traffic' menu, select 'SSL Certificates', then click 'Create'.
3. Under 'General Properties', you can give the certificate a name to identify it on the device. We suggest using the FQDN you are requesting the certificate for.
4. Fill out the 'Certificate Properties' form:

   Issuer: Certificate Authority
   Common Name: Your FQDN (Fully Qualified Domain Name), for example: www.example.com.
   

5. Your CSR is now generated. Open the 'certreq.txt' file with a text-editor and copy and paste the contents into the enrollment form when requested.

F5 BigIP version 4.x

1. Log in to the device as 'root'. Execute the following command:

   #/usr/local/bin/genconf

   You will need to enter all of your company information (name, address etc.)

2. Now execute the command:

   #/usr/local/bin/genkey www.yourdomain.com

   Replace 'www.yourdomain.com' with the FQDN you require the certificate for. This will generate the CSR

3. The CSR will be saved in a file at the location: /config/bigconfig/ssl.csr/www.yourdomain.com.csr
   Copy and paste the contents into the enrollment form when requesting a certificate.