Export F5 SSL certificate and Key files to PFX format:

Step 1 :

Copy the designated website ssl certificate and key files to the tmp folder

SSL cert location:


Key location:


Step 2 :

Impact of procedure: There will be no impact to the system with the below procedure.

  1. Log in to the BIG-IP command line.
  2. Copy the certificate file to the /var/tmp directory

   cp /config/filestore/files_d/Common_d/certificate_d/<Certificate-Filename> /var/tmp/<Destination-Filename>

3. Copy the key file to the /var/tmp directory

cp /config/filestore/files_d/Common_d/certificate_key_d/<Key-Filename> /var/tmp/<Destination-Filename>

4. verify the files using the below command

ls -las /var/tmp/<Destination-Filename>

Step 3 :

To export the certificate/key pair to PFX format, perform the following procedure:

Export the certificate/key pair to PFX format to /var/tmp/certificate.pfx using the following command syntax:

openssl pkcs12 -export -out /var/tmp/<PFX -CertificateName> -inkey /var/tmp/<Key-Filename> -in /var/tmp/<Certificate-Filename>

For example, to export the certificate test.crt and key test.key copied in the previous procedure, type the following command:

openssl pkcs12 -export -out /var/tmp/certificate.pfx -inkey /var/tmp/test.key -in /var/tmp/test.crt

The exported PFX file is named /var/tmp/certificate.pfx.