For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

BIG-IQ 5.2 Centralized Management - Security Overview

Because adding more boxes increases complexity, you need ways to simplify system management. That’s where BIG-IQ Centralized Management comes in. From licensing to policies, traffic to security, you’...
Published Jul 03, 2017
Version 1.0
BIG-IQ
france
security
Matt_Dierick's avatar
Icon for Employee rankEmployee
Security Solution Architect for F5 Networks since 2012. Focusing on Application Access and API Security. You can find more how-to on my YouTube channel : https://goo.gl/eErp51
View Profile
Matt_Dierick's avatar
Icon for Employee rankEmployee
Security Solution Architect for F5 Networks since 2012. Focusing on Application Access and API Security. You can find more how-to on my YouTube channel : https://goo.gl/eErp51
View Profile
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jul 10, 2017

Hi,

 

Very useful video. I wonder if you can help with figuring out plans about certificate management. Right now when you import LTM config all certificates are Unmanaged. To convert them to Managed it's necessary to manually import certificate, key or chain file (probably first exporting from BIG-IP).

 

That is a bit tedious way, so I wonder if it will stay like that in future releases or some option to import actual files is planned. I can understand problems when key files are involved - security and as well password protection, but at for certificates or chain files there should be no security or technical limitation to import - as far as I know BIG-IQ uses both REST API over HTTPS as well as SSH to communicate with BIG-IPs.

 

If importing is not planned maybe you are aware of any scripts that could automate certificate related files transfer from BIG-IPs to BIG-IQ?

 

Piotr