Other ADC configuration

Generate a key on the HSM.

Use third party tools to create keys on the HSM.

Add an HSM key on the ADC.

Important! The # character is not supported in a key name. If the key name includes this character, the load key operation fails.

To add a Thales Luna HSM key by using the CLI:

At the command prompt, type:

where:

-keyName is the key created on the HSM by using third party tools.

-serialNum is the serial number of the partition on the HSM on which the keys are generated.

Note: For HSM in a high availability setup, use the serial number of the high availability group.

-password is the password of the partition on which the keys are present.

To add a Thales Luna HSM key by using the GUI:

Navigate to Traffic Management > SSL > HSM and add an HSM key. You must specify the HSM Type as SAFENET.

Add a certificate-key pair on the ADC. First use a third party tool to generate a certificate associated with the key. Then, copy the certificate to the /nsconfig/ssl/ directory on the ADC.

Note: The key must be an HSM key.

To add a certkey pair on the ADC by using the CLI:

At the command prompt, type:

To add a certkey pair on the ADC by using the GUI:

Create a virtual server and bind the certificate-key pair to this virtual server.