Securing SSL Keys on your BIG-IP
Published Jan 05, 2021
Version 1.0Was this article helpful?
, for sure you want to make sure you have the passphrases documented, "written down" might imply a sticky note on your monitor - that may not be the best. 🙂
I will say, the passphrase on the key is stored within the config but it is protected by the master key - you don't actually need the Master Key itself to access the keys in the BIG-IP configuration. The passphrase on the key itself is the only thing that the BIG-IP user needs.
Thanx for the feedback!