Resource: Manage(CRUD) certificate management resources

Resource used to manage(CRUD) certificate management resources onto BIG-IP Next Central Manager.

Example Usage

resource "bigipnext_cm_certitficate" "test" {
  name            = "test"
  cert_text       = "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----"
  key_text        = "-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----"
  key_passphrase  = "P@ss"
  cert_passphrase = "P@ssss"
  import_type     = "PKCS12"
}

Schema

Required

  • common_name (String) The fully qualified domain name of your server. The common_name of the certificate cannot be empty

  • duration_in_days (Number) duration in days

  • name (String) The unique user-given name of the certificate. Certificate names cannot contain spaces or special characters. The allowed characters are a-z, A-Z, 0-9, dot(.), dash (-) and underscore (_). Names starting with only a-z, A-Z.

Optional

  • administrator_email (String) An administrator email to contact your organization

  • challenge_password (String) challenge password

  • country (List of String) The country where your organization is located. An SSL certificate country code is a two-letter code that’s used when you generate a CSR. It is Array of strings

  • division (List of String) The division of your organization handling the certificate. It is Array of strings

  • email (List of String) An email address to contact your organization. It is Array of strings

  • issuer (String) issuer details

  • key_curve_name (String) Supported curve names for ECDSA- secp384r1, prime256v1

  • key_passphrase (String) key passphrase, A passphrase is a word or phrase that protects private key files, It prevents unauthorized users from encrypting them. Usually it’s just the secret encryption/decryption key used for Ciphers.

  • key_security_type (String) Specifies whether key is password protected

  • key_size (Number) Size of key - the number of bits in a key used by a cryptographic algorithm. Supported key size for RSA - 2048, 3072, 4096

  • key_type (String) Specifies Key type to be either RSA or ECDSA

  • locality (List of String) The locality where your organization is located. It is Array of strings

  • organization (List of String) The legal name of your organization. It is Array of strings

  • state (List of String) The state where your organization is located. It is Array of strings

  • subject_alternative_name (String) A SAN or subject alternative name is a structured way to indicate all of the domain names and IP addresses that are secured by the certificate

Read-Only

  • id (String) Unique Identifier for the resource

Import

Import is supported using the following syntax:

# Certificate can be imported by specifying the numeric identifier.
terraform import bigipnext_cm_import_certitficate.test d4d9ad2f-182c-89a2-0c2a-29838b328ad0