Manual Chapter : Import SSL Orchestrator configuration into BIG-IQ

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 8.4.0
Manual Chapter

Import SSL Orchestrator configuration into BIG-IQ

Before importing an SSL Orchestrator (SSLO) configuration from a BIG-IP device to manage SSLO configurations on BIG-IQ, you must first discover the BIG-IP service.
To begin managing BIG-IP SSLO configurations from BIG-IQ, you must discover the SSLO service and import its configuration. You can re-discover services at any time, but importing this service is a one-time process.
Unlike other services that can be managed from BIG-IQ, SSLO uses a one-time import process. Because you cannot re-import an SSLO configuration, after you complete the initial SSLO discovery and import, do not perform any SSLO configuration changes locally (on the BIG-IP). Instead, you can avoid configuration inconsistencies between the BIG-IP device and BIG-IQ by making all changes on the BIG-IQ.
  1. On BIG-IQ, at the top, click
    Devices
    .
  2. On the left, click
    BIG-IP DEVICES
    .
    The screen displays the list of managed devices for this BIG-IQ Centralized Management system.
  3. Under Device Name, click the hostname of the BIG-IP device that contains the SSLO configuration you want to import.
  4. Select
    SERVICES
    .
  5. To import an SSLO device configuration into BIG-IQ, scroll down to SSL Orchestrator and select
    Import
    .
    After you click
    Import
    , the system opens a popup screen. On this screen, you review and update the settings for the SSLO service on the device. Then, you deploy those settings back to the BIG-IP device before importing the service to BIG-IQ.
  6. For
    Location
    , identify where the devices are physically located.
    • To add this service to an existing location, click
      Use Existing
      , and select the location to which you want BIG-IQ to add this device.
    • To specify a new location, click
      Create New
      , and then type a name for the new location.
  7. Scan the rest of the settings and revise as needed.
    If SSLO has been configured on the BIG-IP device, BIG-IQ displays the current settings from the device. Otherwise, all other required fields are set to their defaults. In either case, you have the option to revise these settings here.
  8. Click
    Deploy
    .
    BIG-IQ deploys the configuration you specified to the BIG-IP device, and then displays an
    Import
    button.
  9. Click
    Import
    .
    BIG-IQ imports the SSLO configuration from the BIG-IP device.
Once you import an SSLO configuration, you should perform all SSLO configuration management from BIG-IQ. When you have changes to make, you can revise the configuration of all SSLO devices using one deployment.