Generating a Certificate Signing Request (CSR) - F5 BIG-IP Loadbalancer

Follow the instructions below to generate a CSR for your Website. When you have completed generating your CSR, copy and paste it into the CSR field on the SSL certificate-request page.

To Generate a CSR Using an F5 BIG-IP Loadbalancer v. 9

1. Open the F5 BIGIP Web GUI.
2. Under Local Traffic, select SSL Certificates, and then Create.
3. Under General Properties, name your certificate.
4. Under Certificate Properties, enter the following information:

Issuer

Certificate Authority (Starfield).

Common name

Fully-qualified domain name of the server (e.g., www.domain.com or mail.domain.com).

If you are requesting a Wildcard certificate, please add an asterisk (*) on the left side of the Common Name (e.g., "*.coolexample.com" or "www*.coolexample.com"). This will secure all subdomains of the Common Name.

Division

Use this field to differentiate between divisions within an organization. For example, "Engineering" or "Human Resources." If applicable, you may enter the DBA (doing business as) name in this field.

Organization

The name under which your business is legally registered. The listed organization must be the legal registrant of the domainname in the certificate request. If you are enrolling as an individual, please enter the certificate requestor's name in the "Organization" field.

Locality, State or Province, Country

City, state or province, and country where your organization is located. Do not abbreviate.

E-mail Address

Your email address.

Challenge Password, Confirm Password

Your password.

5. Under Key Properties, select 2048.
6. Click Finished.
7. Cut or copy the text from the generated CSR into our online enrollment form.

To Generate a CSR Using an Earlier Version of BIG-IP Loadbalancer

1. Login to the BIG-IP device as the root user and run the following command:
   /usr/local/bin/genconf

2. Enter your company details including the full legal company name and address of operation.
3. Enter the following command:
   # /usr/local/bin/genkey www.coolexample.com
   Replace "www.coolexample.com" with the Fully Qualified Domain Name of your server.
4. When prompted, enter your company details.
5. From /config/bigconfig/ssl.csr/, locate the CSR file named "your www.coolexample.com.csr --". Transfer it to the workstation you will use to order the certificate.
6. Cut or copy the text from the generated CSR into our online enrollment form.