F5 BIG-IP

F5 BIG-IP Integration

Short Summary: Direct integration with F5 iControl REST API to push certificates and update Client SSL Profiles.

Prerequisites

• Connectivity: Backend (or Agent) must reach F5 Management IP (Port 443).
• User Account: F5 User with Resource Administrator role (needs write access to /sys/file/ssl-cert).

Configuration

1. Navigate: Admin > Cert Stores > Add New.
2. Select Provider: F5 BIG-IP.
3. Host: https://192.168.1.50.
4. Partition: Common (default).

Workflow

1. Upload: SSL-CLM uploads .crt and .key files via transaction.
2. Install: Installs them into the F5 File Store.
3. Bind: Updates the Client SSL Profile to reference the new cert/key pair.
4. Sync: Triggers Config Sync to HA peers (optional).