Sectigo® ACME F5 Agent – PCI Compliant Integration Administrator Guide

Sectigo ACME F5 BIGIP Integration Overview
The Sectigo ACME F5 BIGIP Certificate Management Agent (hereafter referred to as Agent) is an automation layer developed around open-source Certbot BIGIP Plugin. The default Plugin came with only certificate enrollment capabilities. Sectigo added another layer of features on the default Plugin to automate the complete SSL Certificate Management for the HTTP Virtual Servers of the F5 Appliance.

The certificate lifecycle management is handled by the agent that invokes Certbot Plugin to communicate with Sectigo ACME server to request, renew, or revoke SSL/TLS certificates, install it on the F5 Appliances and enable SSL feature on the Virtual Servers.

Audience
This document is intended for IT administrators and Network Administrators who manage F5 Appliances for an organization.

Scope
This document contains instructions for enrolling and managing Sectigo certificates on F5 Appliances. Setting up the F5 appliances is out of the scope of this document and the test environment used to test the tool is briefly described in Section 2: Prerequisites.