Views:

To generate your Certificate Signing Request (CSR), you will need to use the following instructions depending on your version of the BigIP software.

F5® BigIP Version 9 and Later

Follow these instructions to generate a CSR for F5 BigIP version 9 or later versions:

  1. 1. Open and log into the BigIP web interface.
  2. 2. Under the Local Traffic menu, select SSL Certificates, then click Create.
  3. 3. Under General Properties, you can give the certificate a name to identify it on the device. We suggest using the FQDN you are requesting the certificate for.
  4. 4. Fill out the Certificate Properties form:
  5. FieldValue
    IssuerCertificate Authority
    Common NameYour FQDN (Fully Qualified Domain Name).
    Example: www.example.com
  6. 5. Your CSR is now generated. Open the certreq.txt file with a text-editor and copy and paste the contents into the enrollment form when requested.
  7. You have generated your CSR for F5 BigIP.

F5 BigIP Version 4.x

Follow these instructions to generate a CSR for F5 BigIP version 4x:

  1. 1. Log into the device as root. Execute the following command:
  2. #/usr/local/bin/genconf
  3. You will need to enter all of your company information (name, address etc.)
  4. 2. Now execute the command:
  5. #/usr/local/bin/genkey www.yourdomain.com
  6. 3. Replace www.yourdomain.com with the FQDN you require the certificate for. This will generate the CSR
  7. The CSR will be saved in a file at the location: /config/bigconfig/ssl.csr/www.yourdomain.com.csr.
  8. 4. Copy and paste the contents into the enrollment form when requesting a certificate.
  9. You have generated your CSR for F5 BigIP.