Skip to main content
Skip table of contents

How to Generate a CSR for F5 BIG IP (version 8 and under)

This article details how to generate a CSR for F5 BIG IP version 8 and under systems.

Login to the BIG-IP device as the root user and run the following command:

1. Log In

# /usr/local/bin/genconf

2. Enter Your Company Details

Including the full legal entity name and physical address of operation. Do not abbreviate.

3. Create the CSR

Enter the following command:

# /usr/local/bin/genkey 

You will replace with the FQDN (fully-qualified domain name) you want to secure with the certificate such as,, *, etc.

4. Copy the CSR Text from the File

Under /config/bigconfig/ssl.csr/ locate and open the newly created CSR file named after the FQDN you specified (i.e. in a text editor such as Notepad and copy all of the text including:


You may have to transfer the CSR to the workstation you will use to order the certificate.

5. Upload Your CSR

After you have received your CSR, return to your 101domain account and upload your CSR or paste in your CSR code.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.