How to Generate a CSR for F5 BIG IP (version 8 and under)
This article details how to generate a CSR for F5 BIG IP version 8 and under systems.
Login to the BIG-IP device as the root user and run the following command:
1. Log In
# /usr/local/bin/genconf2. Enter Your Company Details
Including the full legal entity name and physical address of operation. Do not abbreviate.
3. Create the CSR
Enter the following command:
# /usr/local/bin/genkey www.domain.com 
You will replace www.domain.com with the FQDN (fully-qualified domain name) you want to secure with the certificate such as www.google.com, secure.website.org, *.domain.net, etc.
4. Copy the CSR Text from the File
Under /config/bigconfig/ssl.csr/ locate and open the newly created CSR file named after the FQDN you specified (i.e. www.domain.com.csr) in a text editor such as Notepad and copy all of the text including:
-----BEGIN CERTIFICATE REQUEST-----
And
-----END CERTIFICATE REQUEST-----You may have to transfer the CSR to the workstation you will use to order the certificate.
5. Upload Your CSR
After you have received your CSR, return to your 101domain account and upload your CSR or paste in your CSR code.