BIG-IQ 5.2 Centralized Management - Security Overview
Hi,
Very useful video. I wonder if you can help with figuring out plans about certificate management. Right now when you import LTM config all certificates are Unmanaged. To convert them to Managed it's necessary to manually import certificate, key or chain file (probably first exporting from BIG-IP).
That is a bit tedious way, so I wonder if it will stay like that in future releases or some option to import actual files is planned. I can understand problems when key files are involved - security and as well password protection, but at for certificates or chain files there should be no security or technical limitation to import - as far as I know BIG-IQ uses both REST API over HTTPS as well as SSH to communicate with BIG-IPs.
If importing is not planned maybe you are aware of any scripts that could automate certificate related files transfer from BIG-IPs to BIG-IQ?
Piotr