Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.0.0
Opened: Dec 07, 2017 Severity: 3-Major
When importing a certificate (cert) using the GUI Configuration utility, you can specify a partition folder, and the system imports the cert into that partition folder. However, specifying a partition folder when importing a PKCS12 cert imports it to the root partition folder, Common.
PKCS12 files imported using the GUI Configuration utility are placed at root partition folder, Common, rather than the partition folder.
Login to GUI: - Navigate to: System :: Certificate Management : Traffic Certificate Management : SSL Certificate List. - Click Import: Select 'PKCS'. - Give the cert a name: sync_group/pk12gui
You can use either workaround: -- Once the PKCS12 file has been imported, export the cert and key, and then re-import into the partition folder. -- Import PKCS12 file using TMSH.
PKCS12 files imported via Configuration utility into folder are now placed in the specified partition folder.