Manual Chapter : SSL Certificate Monitoring

Applies To:

Show Versions Show Versions

BIG-IQ Centralized Management

  • 4.6.0
Manual Chapter

About SSL certificate monitoring

When you manage BIG-IP® devices that load balance SSL traffic, you must monitor both their SSL traffic and SSL system certificates. Traffic certificates are server certificates that a device uses for traffic management tasks. System certificates are the web certificates that allow client systems to log in to the BIG-IP Configuration utility.

BIG-IQ® Device populates the Certificates panel with details about each certificate on every managed BIG-IP device you discover. This makes it easy to monitor the expiration dates all of your devices' SSL certificates from one location.

Monitoring SSL certificate expiration dates

You must discover at least one device for the Certificates panel to display a device's SSL certificate properties before you can monitor the certificates.
SSL certificates have a set expiry date, and do not automatically renew. For this reason, it is important to monitor the SSL certificate's expiration dates for your managed devices.
  1. Log in to BIG-IQ Device with your administrator user name and password.
  2. At the top of the screen, click Configuration.
  3. Review the Certificates panel.
    A yellow icon appears next to any SSL certificates that are either within 30 days of expiring, or have already expired.
  4. Click the gear icon next to an SSL certificate to view its properties.
If an SSL certificate is about to expire, or has expired, immediately contact the owner of the device.