Close Window x

Frequently Asked Questions

Generating a Certificate Signing Request (CSR) - F5 BIG-IP Loadbalancer

Print this Article
Last Updated: July 15, 2015 3:22 PM

Follow the instructions below to generate a CSR for your Web site. When you have completed generating your CSR, copy and paste it into the CSR field on the SSL certificate-request page.

To Generate a CSR Using an F5 BIG-IP Loadbalancer v. 9

  1. Open the F5 BIGIP Web GUI.
  2. Under Local Traffic, select SSL Certificates, and then Create.
  3. Under General Properties, name your certificate.
  4. Under Certificate Properties, enter the following information:
    5. Issuer
    Certificate Authority (Starfield).
    Common name
    Fully-qualified domain name of the server (e.g., www.domain.com or mail.domain.com).

    NOTE: If you are requesting a Wildcard certificate, please add an asterisk (*) on the left side of the Common Name (e.g., "*.coolexample.com" or "www*.coolexample.com"). This will secure all subdomains of the Common Name.

    Division
    Use this field to differentiate between divisions within an organization. For example, "Engineering" or "Human Resources." If applicable, you may enter the DBA (doing business as) name in this field.
    Organization
    The name under which your business is legally registered. The listed organization must be the legal registrant of the domainname in the certificate request. If you are enrolling as an individual, please enter the certificate requestor's name in the "Organization" field.
    Locality, State or Province, Country
    City, state or province, and country where your organization is located. Do not abbreviate.
    E-mail Address
    Your email address.
    Challenge Password, Confirm Password
    Your password.
  5. Under Key Properties, select 2048.
  6. Click Finished.
  7. Cut or copy the text from the generated CSR into our online enrollment form.

To Generate a CSR Using an Earlier Version of BIG-IP Loadbalancer

  1. Login to the BIG-IP device as the root user and run the following command:
    /usr/local/bin/genconf

  2. Enter your company details including the full legal company name and address of operation.
  3. Enter the following command:
    # /usr/local/bin/genkey www.coolexample.com
    Replace "www.coolexample.com" with the Fully Qualified Domain Name of your server.
  4. When prompted, enter your company details.
  5. From /config/bigconfig/ssl.csr/, locate the CSR file named "your www.coolexample.com.csr --". Transfer it to the workstation you will use to order the certificate.
  6. Cut or copy the text from the generated CSR into our online enrollment form.