Manual Chapter : Import SSL Orchestrator configuration into BIG-IQ

Applies To:

  • BIG-IQ Centralized Management

    7.1.0

Import SSL Orchestrator configuration into BIG-IQ

Before importing an SSL Orchestrator (SSLO) configuration from a BIG-IP device to manage SSLO configurations on BIG-IQ, you must first discover the BIG-IP service.

To begin managing BIG-IP SSLO configurations from BIG-IQ, you must discover the SSLO service and import its configuration.You may re-discover services at any time, but importing the service is a one-time process. Once you begin managing SSLO configurations from BIG-IQ, do not make changes to these configurations locally on the BIG-IP device, as doing so results in inconsistent configurations.

  1. On BIG-IQ, at the top, click Devices.

  2. On the left, click BIG-IP DEVICES.

    The screen displays a list of managed devices for this BIG-IQ Centralized Management system.

  3. Under Device Name, select the cluster member containing the SSLO configuration you want to import.

  4. Select SERVICES.

  5. To import an SSLO device configuration into BIG-IQ, scroll down to the bottom of the screen and select Import.

    Important: Unlike other services that can be managed from BIG-IQ, SSLO employs a one-time import process. Once you import an SSLO configuration from a BIG-IP device, any configuration changes made locally on the BIG-IP SSLO cannot be re-imported to BIG-IQ and will result in inconsistent configurations between the BIG-IP device and BIG-IQ.

    Once you select Import, the system opens a popup screen.

  6. From Location, select a unique name to identify a device or group of devices.

    • If the imported SSLO service has not been configured, all other required fields are set to their defaults, which you may edit.
    • If the imported service has been configured on the BIG-IP device, the popup screen displays the existing settings assigned by the user on the BIG-IP device, which you may also edit during the import stage.

Once you have imported SSLO configurations from the BIG-IP device into BIG-IQ, you are ready to centrally manage all configurations for SSLO on BIG-IQ, and mass-deploy the configurations.