To Request a Certificate for OpenSSO Enterprise Load Balancer 2

You should already have a root certificate from the CA of your choice. Generate a request for a server certificate to send to the CA. For more information, see 3.3 Obtaining Secure Socket Layer Certificates.

1. Access https://is-f5.example.com, the BIG-IP load balancer login page, in a web browser.

2. Log in to the BIG-IP console as administrator.

3. Click Configure your BIG-IP (R) using the Configuration Utility.

4. In the left pane, click Proxies.

5. Click the Cert-Admin tab.

6. On the SSL Certificate Administration page, click Generate New Key Pair/Certificate Request.

7. In the Create Certificate Request page, provide the following information.

   Key Identifier:

   lb2.idp-example.com

   Organizational Unit Name:

   Deployment

   Domain Name:

   lb2.idp-example.com

   Challenge Password:

   password

   Retype Password:

   password

8. Click Generate Key Pair/Certificate Request.

   On the SSL Certificate Request page, the request is generated in the Certificate Request field.

9. Save the text contained in the Certificate Request field to a file named lb-2.csr.

10. Log out of the console and close the browser.

11. Send lb-2.csr to the CA of your choice.

    The CA issues and returns a certified server certificate named lb-2.cer.