diff --git a/source/vendor/deciso/opncentral.rst b/source/vendor/deciso/opncentral.rst index 16bd557c..fb83f1e2 100644 --- a/source/vendor/deciso/opncentral.rst +++ b/source/vendor/deciso/opncentral.rst @@ -6,6 +6,9 @@ As part of the OPNsense Business Edition, Deciso offers a plugin to keep all you an easy entry point to manage them. +.. contents:: Index + + Installation --------------------------- @@ -51,6 +54,18 @@ the url from the machine and the API key and secret generated above. Delete host configuration

+Central WebGui certificate management +...................................... + +The host configuration offers an option to link a central certificate to the managed host, in which case +the certificate will be distributed to the host (if :code:`WebGui` is being provisioned). + +Using this feature, you're able to centrally manage certificates (manually or using ACME) easily. + +.. Tip:: + + Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron` + with a daily schedule to automatically provision all attached firewalls on a daily basis. Alter generic host settings @@ -268,6 +283,11 @@ inspect status and push options to the attached firewalls. Be **very** careful pushing settings to your connected firewall which may disconnect your session, such as firewall and routing related options. The central management host can't predict if settings you plan to make lead to an inaccesible firewall. +.. Tip:: + + Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron` + with a daily schedule to automatically provision all attached firewalls on a daily basis. + All provisioning classes known by the management machine will be shown in the table, combined with the status of each section. OPNcentral calculates if settings are equal, keeps track of changes and restarts related services when needed. @@ -285,6 +305,8 @@ You can either selectlively reconfigure specific hosts with the checkbox or reco Unable to connect

+ + Provisioning classes ---------------------------------------------------- @@ -405,9 +427,10 @@ Merging categories will preserve the ones that are currently used on the remote WebGui (Administration) .................................................... -To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation. +To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation +(or the one provided in the host configuration will be shipped). .. Note: - Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will be - overwritten in that case. + Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will potentially + be overwritten in that case.