{"id":298,"date":"2014-07-24T01:27:49","date_gmt":"2014-07-24T09:27:49","guid":{"rendered":"https:\/\/cheapsslsecurity.com\/blog\/?p=298"},"modified":"2021-01-26T09:13:20","modified_gmt":"2021-01-26T17:13:20","slug":"step-by-step-ssl-installation-guide-for-f5-big-ip","status":"publish","type":"post","link":"https:\/\/cheapsslsecurity.com\/blog\/step-by-step-ssl-installation-guide-for-f5-big-ip\/","title":{"rendered":"Step-by-Step SSL Installation Guide for F5 Big-IP"},"content":{"rendered":"

Big-IP<\/strong> is a product of F5 Networks<\/strong>, an Application Delivery and Networking Company in US, a widely used tool, which ensures that applications are running fast, securely and is reliably available on the network. Big-IP is the world\u2019s most comprehensive application delivery tool.<\/p>\n

After applying for an SSL certificate you will receive it via e-mail, which contains 3 certificate files \u2013 your primary server certificate, a root certificate identifying the SSL provider, and an intermediate certificate. Once you have downloaded these 3 certificate files you will need to copy them onto your Big-IP controller.<\/p>\n

Steps to install SSL Certificates on F5 Big-IP<\/span><\/h2>\n

For F5 Big-IP version 9 or higher:<\/span><\/h2>\n

Step 1: Installing SSL certificate<\/strong><\/h2>\n

(1) <\/b>To get started, run the \u2018F5 Big-IP\u2019 load-balancer <\/strong>web GUI<\/p>\n

(2)<\/strong> Here, select SSL Certificates<\/strong> under the Local Traffic<\/strong> menu.<\/p>\n

(3)<\/strong> Now under General Properties<\/strong>, select the certificate name that you assigned while creating the CSR<\/strong>.<\/p>\n

(4)<\/strong> Browse<\/strong> for the certificate file that you received from the certificate authority via Email, or downloaded from your control panel.<\/p>\n

(5)<\/strong> Now Click Import<\/strong> and then click Open<\/strong>.<\/p>\n

Your SSL certificate is now installed.<\/p>\n

\"SSL<\/p>\n

Figure 1 : SSL certificate Installation on F5 Big IP<\/b><\/p>\n

Step 2: Enable Intermediate certificate<\/h2>\n

(1)<\/strong> Under the menu Local Traffic<\/strong>\u00a0you need to select SSL certificate<\/strong>, and then click on Import<\/strong>.<\/p>\n

(2)<\/strong> Select the certificate again under <\/b>the Import Type <\/b>and then click on the option Create New.<\/b><\/p>\n

(3)<\/strong> Enter a friendly name for your certificate and browse for the intermediate certificate file received via Email<\/p>\n

(4)<\/strong> Now, import it by clicking on Open<\/b>.<\/p>\n

Your intermediate SSL Certificate is now Installed.<\/p>\n

\"Import<\/p>\n

Figure 2 : Import SSL certificate & keys on F5 Big IP<\/strong><\/p>\n

Step 3: Configuration of your server for SSL<\/h2>\n

(1)<\/strong> Create or open the SSL profile<\/b>\u00a0that you will be using with the SSL certificate.<\/b><\/p>\n

(2)<\/strong> Click on Advanced<\/b>\u00a0from the drop-down menu, under the Configuration <\/b>window.<\/p>\n

(3)<\/strong> Now, select the SSL certificate public\/private key pair<\/strong> that was installed by you in the beginning.<\/p>\n

(4)<\/strong> Under the Chain <\/b>section, browse for the certificate friendly name that you chose during Step 2 and click on Save <\/b>and Exit<\/b>.<\/p>\n

With this step, your server is now configured properly, along with a successfully installed and enabled SSL certificate on F5 Big-IP.<\/p>\n

 <\/p>\n

For\u00a0F5 Big-IP version below 9.x:<\/span><\/h2>\n

As discussed in Step 1 above, download your primary, intermediate and root certificate. Here, you only need the primary server certificate and intermediate certificate for the installation process on your F5 Big-IP device.<\/p>\n

Perform following steps:<\/strong><\/h2>\n

(1)<\/strong> Using FTP (File Transfer Protocol) move your Primary and Intermediate certificates onto your F5 Big-IP device.<\/p>\n

(2)<\/strong> Rename your primary certificate with \u2018yourdomain.crt\u2019<\/i><\/b> and copy it into the \u2018\/config\/bigconfig\/ssl.crt\/\u2019 folder on your F5 Big-IP device. Follow the same process to copy your Intermediate-ca.crt <\/i><\/b>certificate (sometimes also called CA1-Certificate or CA2- Certificate)<\/b> into the \u2018<\/i><\/b>\/config\/bigconfig\/ssl.crt\/\u2019 folder on your F5 Big-IP device.<\/p>\n

(3)<\/strong> Restart the Proxy by executing following commands:<\/p>\n

(i)<\/strong> # bigpipe proxy :443 disable<\/p>\n

(ii)<\/strong> # bigpipe proxy :443 enable<\/p>\n

With this step, your certificate is successfully installed on your F5 Big-IP device.<\/p>\n

Resources:<\/span><\/h2>\n