The installation procedure to upload a SSL certificate from Verisign into F5 load balancer is given below
STEP I: Export Certificate and Private Key from the first IIS 6.0 server
Create an MMC Snap-in for Managing Certificates:
1. Start > run > MMC
2. Go into the Console Tab > File > Add/Remove Snap-in
3. Click on Add > Click Certificates > Add
4. Choose Computer Account
5. Choose Local Computer
6. Close the Add Standalone Snap-in window.
7. Click OK at the Add/Remove Snap-in window.
Export the Certificate with Private Key attached:
8. Expand Certificates in the Console Tree
9. Look for a folder called Personal > Certificates
10. Select the Certificate that you wish to back up.
11. Right-click on the file and choose > ALL TASKS > Export
12. The Certificate Export Wizard will start up. Click Next
13. Choose Yes, export the private key
14. Select Include all certificates in the certification path and click Next
15. Set a password to protect the export of the Private key file with the Certificate. Click Next
16. Choose to save the file to a set location.
Type the file name in the 'File Name' box, and click Save
Click Next
The file is given a *.pfx file-name extension
Login into F5 and change the directory to var/tmp
start the ftp prompt
Bin
get .pfx file
exit ftp
convert the .pfx file into .pem file by
openssl pkcs12 -in sap.ltg.info.pfx -out sap.ltg.info.pem –nodes
export the .pem file into your workstation.
open the pem file using wordpad
copy the key to notepad and save all ALL files .key
copy cert to not a notepad and save ALL file .crt
Load the key into F5 and then CRT file. Once the certificate is loaded, the certificate details will be displayed under SSL certificates tab.
