保護されていないエンドポイントに新規の証明書を導入する
DigiCert® Trust Lifecycle Manager の［Inventory］ビューで、現在証明書がインストールされてないいずれかの F5 BIG-IP LTM 仮想 IP に、新規の証明書を要求してインストールすることができます。
Generates the private key and certificate signing request (CSR) in the selected F5 partition, and delivers the issued certificate to the same partition.
Adds the certificate to a new or existing Client SSL profile, depending on your request settings.
注記
To also install the certificate on a virtual IP (VIP) on the F5 appliance as part of the certificate request, see 保護されていないエンドポイントに新規の証明書を導入する. To manage lifecycles of existing certificates on an F5 appliance, see 既存の証明書を管理および更新する.
Before you begin
Add the F5 connector in Trust Lifecycle Manager for the target appliance.
Create a certificate automation profile with the
Admin web requestenrollment method.
Submit a certificate delivery request
Start by initiating the request and configuring basic settings for the certificate to enroll and deliver.
In the Trust Lifecycle Manager menu, go to Inventory.
Select the Admin web request button at top.
On the Certificate setup screen, configure the basic certificate options:
Select Next.
On the Delivery integrations screen, select the delivery locations for the issued certificate and configure options for each.
Select the Add button to enable specific target types.
In the sidebar that opens, use the checkboxes to enable individual target types or Select all to enable all of them.
Select Apply to add the selected delivery targets to your certificate request.
The delivery targets you added appear on the left. Select each one and configure delivery options for it on the right.
After configuring options for each deliver target, it shows as
Configuredon the left. When all targets are configured, select Next to proceed.
On the Review & Submit screen, review all the options you selected and submit the request.