Creating new GTM device certificate

Hi,

 

 

The device certificates on our GTMs are due to expire soon. I'd like to take the opportunity to increase the key length from 1024 to 2048. I've already done this on one of our LTMs without any problems by following sol9114.

 

 

Generate the F5 device private key by typing the following command:

 

gencert -p /config/httpd/conf/ -n server 1024

 

 

Generate the F5 device certificate by typing the following command: openssl req -new -key /config/httpd/conf/ssl.key/server.key -days 365 -x509 -out /config/httpd/conf/ssl.crt/server.crt Note: This command creates a certificate that expires in 365 days. To change the expiration date, enter a different number of days after the days flag.

 

 

Restart the httpd process by typing the following command: bigstart restart httpd

 

 

run bigip_add

 

 

Am I OK to follow this procedure for the GTMs?

 

 

Many Thanks

 

Darren