How do I manage Certificate Revocation Lists from BIG-IQ?

A Certificate Revocation List (CRL) is crucial part of helping your BIG-IP devices securely pass internet traffic by ensuring sure your BIG-IP devices accept only traffic with valid and trustworthy certificates. From BIG-IQ Centralized Management, you can easily import and manage your BIG-IP devices CRLs conveniently from one location.

Import a Certificate Revocation List file

When you discover a BIG-IP device, BIG-IQ Centralized Management imports its meta-data for the PEM-formatted Certificate Revocation List (CRL).

Import a BIG-IP device’s CRL file to BIG-IQ so you can manage it.

1. At the top of the screen, click Configuration.

2. Click the Import button.

3. In the Partition field, type the partition where you want to store the CRL file.

4. Click Choose File and navigate to the location of the file.

   Alternatively, you select Paste Text and paste the CRL file’s contents into the Source field.

5. Click the Save & Close button.

The CRL file displays as managed in the Certificate Revocation list.