F5 Loadbalancer Certificate discovery

Nisha30
Kilo Sage

3 weeks ago

Hello Experts,

 

From the F5 LoadBalancer Certificate documentation can anyone assist what exact credential we need to setup in ServiceNow.

We have dedicated Account - 

1. Do we need to create SSH credential in ServiceNow?

2. DO we need to create SNMP credentials in ServiceNow?

3. OR they need to be given permission on F5 device end?

 

It is not clear if we need to create cerdentials in ServiceNow. The pattern are active and in Extension section has been added.

 

Thanks

0 Helpfuls
  • 621 Views
7 REPLIES 7

sivasankaris
Tera Guru

3 weeks ago

@Nisha30 ,

If you are trying to do the discovery of F5 LoadBalancer.., then No API Calls things are needed. just follow this steps.. These are taken from the docs itself..

 

Let me explain the steps clearly..

  • First, You need to store the Credentials in the discovery Credentials table so for that..                                  Navigate to All > Discovery > Credentials > SNMP Community(if you got V3 Creds, Select the type as SNMP V3)
  • Then Open the discovery patterns (All> Discovery > Discovery Patterns) Search for the pattern F5 - SSH - SSL Certification make sure it is in Active State. This pattern is used to collect the SSL Certificate.
  • Now again Search for the pattern F5 Load Balancer (This is the main pattern  which is used to discover your F5 Load Balancer).
  • Open this F5 Load Balancer Pattern , Then in the extension section of the pattern add this F5 - SSH - SSL Certification. Click save.
  • Now, Go to the discovery > discovery schedule > Quick discovery > give your ip of LoadBalancer and select the correct MidServer.
  • Now Discovery will collect the SSL Certificate for you..

sivasankaris_1-1784129905417.png

 

If this works... Please Accept My Solution...

Nisha30
Kilo Sage
In response to sivasankaris

3 weeks ago

Hi @sivasankaris 

 

We are trying to discover certificates from F5 Loadbalancer (IPv4)

 

And we have the extension F5 - SSH - SSL Certification added in both patterns.

 

Only confusion what i am having is - for discovering certificates via API, do we need to create web services ?? separately ?

 

as SSH and SNMP credentials can be set up in Credential table for Discovery and we are already using for our infrastructure devices.

 

Thanks

 

 

0 Helpfuls

ayushraj7012933
Giga Guru

3 weeks ago

For F5 Load Balancer Certificate Discovery, you'll typically need to create an SSH credential in ServiceNow if the discovery pattern connects to the F5 device using the CLI. SNMP credentials are generally not required for certificate discovery unless your environment specifically uses SNMP for discovery or identification.

The account created on the F5 should have the necessary permissions to access the certificate and configuration details. Once you've created the SSH credential in ServiceNow, make sure it's available to the MID Server so the discovery pattern can authenticate and collect the required information.

If the pattern is already active and the extension has been installed, the main thing to verify is that the correct credential is configured in ServiceNow and that the F5 account has sufficient permissions. In most cases, that's all that's needed for successful certificate discovery.