How to update a certificate on a ADC FIPS appliance. We are assuming the private key file of the new certificate is encrypted.
1. Upload the certificate and key file on the ADC (Traffic mgt > SSL > SSL files)
2. Decrypt the private key >> go to CLI. Enter the following commands:
SHELL
cd /nsconfig/ssl
Is -lrt
openssl rsa -in encryptedkeyfile.key -out decryptedkey.pem
(Enter passphrase)
exit
3. import ssI fipsKey newkey-fips.key -key "/nsconfig/ssl/decryptedkey.pem" -inform PEM -exponent 3
4. update ssI certKey certkeypairname -cert newcert.crt -fipsKey newkey-fips.key -inform PEM -noDomainCheck