Entrust Datacard

Entrust Certificate Services Support Knowledge Base

Last Modified: 2016-09-07 15:42:18.0

How are the L1M Chain Certificates installed on F5 BIG-IP?

Article Number: 46482


How are the L1M Chain Certificates installed on F5 BIG-IP?



To install the L1M Chain Certificates, complete the following steps:

** Note: These steps are based on Build 39 of the F5 Big IP version 11.3.0


Part 1 – Create a Chain Bundle file

Using the instructions below, combine the L1M Entrust Chain and L1M Chain Root/Cross certificates into a single file to allow both certificates to be imported into the F5 BIG-IP as one file.

    • Download the L1M Chain Certificate (default file name: L1Mchain.txt) and L1M Chain Root / Cross Certificate (default file name:  L1Mchainroot.txt) from your certificate pick up link.
    • Open a text editor such as Notepad and paste the certificates (including the BEGIN and END tags) into one text file in the following order:

    1.       L1M Chain Certificate  

    2.       L1M Chain Root/Cross  Certificate

        The result should look as follows:

        -----BEGIN CERTIFICATE-----

        (L1M Chain Certificate)

        -----END CERTIFICATE-----

        -----BEGIN CERTIFICATE-----

        (L1M Chain Root / Cross certificate)

        -----END CERTIFICATE-----

        Save the combined file as Chain_Bundle.txt.


    Part 2 – Import the Chain Bundle

      • Launch the F5 BIG-IP web GUI.
      • On the Main tab, click on System, select File Management then select SSL Certificate List.

        • In the upper right corner of the screen, click Import.

          • From the Import Type list, select Certificate.

            • In the Certificate Name box, type a unique name for the certificate.
            • In the Certificate Source box, browse to the location of your Chain bundle file created in Part 1 (Chain_Bundle.txt).

              • Click Import. The Chain bundle should appear in the Certificate List.