Generate CSR - F5

Feb 19, 2024

Generate CSR - F5

Generating a Certificate Signing Request (CSR) in F5

Article Purpose: This article provides step-by-step instructions for generating a Certificate Signing Request (CSR) in F5.If this is not the solution you are looking for, please search for your solution in the search bar above.

  1. Create an SSL configuration file using the command:
    # /usr/local/bin/genconf
  2. After running this command, the BIG_IP will ask that you fill in the following information:

    Note: The following characters are not accepted: < > ~ ! @ # $ % ^ * / \ ( ) ?.,&
    Country Name (2 letter code): [US]
    State or Province Name (full name): [New Hampshire]
    Locality Name (city): [Portsmouth]
    Organization Name (company): [GlobalSign, Inc.]
    Organizational Unit Name (section): [IT]
    Common Name (Your name): [] (Must be the FQDN - Fully Qualified Domain Name)

    Note: DO NOT Enter the following:
    Email Address
    Challenge password
    Retype Password
  3. Generate a new certificate request by using the command:
    # /usr/local/bin/genkey
    Be sure to replace "" with your Fully Qualified Domain Name/Common Name.
  4. You will be prompted to enter your company information a second time. Fill in the necessary information as listed in Step 2 and leave the same areas blank.
  5. The CSR will be stored in the following:
    /config/bigconfig/ssl.crt/Fully Qualified Domain Name. crt
  6. Copy the entirety of the CSR. Be sure to include the beginning and end tags:
    -----END CERTIFICATE-----

Related Articles

GlobalSign System Alerts

View recent system alerts.

View Alerts

Atlas Discovery

Scan your endpoints to locate all of your Certificates.

Sign Up

SSL Configuration Test

Check your certificate installation for SSL issues and vulnerabilities.

Contact Support