I have one that works all though only from the F5 command line as well as an execute script in the Configuration Manager tool on the NCM sever. It is as follows
- tmsh save /sys ucs config.ucs
- scp /var/local/ucs/config.ucs scpsvrloginname@scpsvrIP:${NodeCaption}-${Date}-${Time}.ucs
- ${Delay:2}
- scpsvrpassword
- ${Delay:2}
- exit
You will need to do this manually from the command line the first time because between step 2 and 3 the first time, the F5 is going to ask you yes or no to add it to the recognized server list. So what this will do is create a fresh backup file on the F5 in the /var/local/ucs directory called config.ucs which contains all the context configs and all the certificates. Then it will scp that file to the scp server root directory and change the name to nodename-date-time.ucs.
We are using this on F5 version 11. I have not figured out how to automate it yet