How to Install SSL Certificate on F5 Big IP

Steps to Install SSL on F5 Big IP

Initial Checklist

Please check the following processes have been completed before installing an SSL certificate.

• Buy or Renew SSL Certificate
• Generate CSR with SHA-2
• Save CSR & Private key file on your server
• Apply for SSL Certificate Issuance
• Submit SSL Issuance documents to Certificate authority (for EV & OV SSL Certificate).

Step 1: Store Certificate Files

Once your certificate authority issue your SSL certificate, you will receive an email including at *.zip file, it contains your primary, root and intermediate certificate files.

Step 2: SSL Certificate Installation

• Open F5 Big IP load-balancer
• Under the Local Traffic menu, select SSL certificates
• In General Properties, select the SSL Certificate name which you have assigned during CSR
• Browse your SSL Certificate file stored on your server and click on Open.
• Now click on Import

SSL Certificate file is now installed.

Step 3: Intermediate Certificate Installation

• Click on SSL Certificates under Local Traffic menu, and then click on Import
• Select Certificate under Import Type drop-down list and select Create New.
• Enter your intermediate Certificate name & then browse for the Intermediate certificate file
• Now click on Open button and then press Import

Intermediate Certificate file is now installed.

Step 4: SSL Server Configuration

• Create an SSL profile or open the profile which you’ve been using with the SSL certificate
• Navigate to Configuration utility > Local Traffic > Profiles > Client
• Select the client which you need to configure and from Configuration menu select Advanced.
• Now browse for the SSL Certificate which you have recently imported, then click on Save button.
• Click on Exit.

F5 Big IP Server is now configured to use a secured connection.

95%
OFF

AboutSSL’s Best Stuff

Resources and Other Installation Guides

• F5 Big IP Support Center
• Install SSL on Tomcat Web Server
• Install SSL on Juniper NetScreen