SSL Certificate CSR Creation for f5 BIG-IP

You must create a SSL configuration file, before generating a CSR. This can be completed by running the following command:

# /usr/local/bin/genconf

When you run this command, the Big-IP will ask for your company information.

• Country Name (2 letter code) :GB
• State or Province Name (full name) : London
• Locality Name (eg, city) :London
• Organization Name (eg, company) : SSL247
• Organizational Unit Name (eg, section) :IT
• Common Name (eg, YOUR name) :www.yourdomain.net (Must be the Fully Qualifed Domain Name)
• Email Address - Leave blank
• Challenge Password - Leave blank
• Retype Password - Leave blank

Run the following command to generate a new certificate request:

# /usr/local/bin/genkey www.yourdomain.com

Be sure to replace www.yourdomain.com with your Common name – FQDN (Fully Qualifed domain name). You will be prompted again for your company information during this step.

• Country Name (2 letter code) :GB
• State or Province Name (full name):London
• Locality Name (eg, city):London
• Organization Name (eg, company) :Global Sign
• Organizational Unit Name (eg, section):IT
• Common Name (eg, YOUR name) :www.yourdomain.net (Must be the FQDN - Fully Qualifed Domain Name)
  • -----BEGIN CERTIFICATE REQUEST-----
  • and
  • -----END CERTIFICATE REQUEST-----

The CSR will be stored in the following: /config/bigconfig/ssl.crt/Fully Qualified Domain Name.crt Copy the entire contents of the CSR, insuring to include