mirror of
https://github.com/opnsense/docs
synced 2024-10-30 21:20:20 +00:00
OPNcentral - add "Central WebGui certificate management" option
This commit is contained in:
parent
4b13bd6fc7
commit
a02c338d16
29
source/vendor/deciso/opncentral.rst
vendored
29
source/vendor/deciso/opncentral.rst
vendored
@ -6,6 +6,9 @@ As part of the OPNsense Business Edition, Deciso offers a plugin to keep all you
|
|||||||
an easy entry point to manage them.
|
an easy entry point to manage them.
|
||||||
|
|
||||||
|
|
||||||
|
.. contents:: Index
|
||||||
|
|
||||||
|
|
||||||
Installation
|
Installation
|
||||||
---------------------------
|
---------------------------
|
||||||
|
|
||||||
@ -51,6 +54,18 @@ the url from the machine and the API key and secret generated above.
|
|||||||
<i class="fa fa-fw fa-trash-o"></i> Delete host configuration<br/><br/>
|
<i class="fa fa-fw fa-trash-o"></i> Delete host configuration<br/><br/>
|
||||||
|
|
||||||
|
|
||||||
|
Central WebGui certificate management
|
||||||
|
......................................
|
||||||
|
|
||||||
|
The host configuration offers an option to link a central certificate to the managed host, in which case
|
||||||
|
the certificate will be distributed to the host (if :code:`WebGui` is being provisioned).
|
||||||
|
|
||||||
|
Using this feature, you're able to centrally manage certificates (manually or using ACME) easily.
|
||||||
|
|
||||||
|
.. Tip::
|
||||||
|
|
||||||
|
Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron`
|
||||||
|
with a daily schedule to automatically provision all attached firewalls on a daily basis.
|
||||||
|
|
||||||
|
|
||||||
Alter generic host settings
|
Alter generic host settings
|
||||||
@ -268,6 +283,11 @@ inspect status and push options to the attached firewalls.
|
|||||||
Be **very** careful pushing settings to your connected firewall which may disconnect your session, such as firewall and routing related
|
Be **very** careful pushing settings to your connected firewall which may disconnect your session, such as firewall and routing related
|
||||||
options. The central management host can't predict if settings you plan to make lead to an inaccesible firewall.
|
options. The central management host can't predict if settings you plan to make lead to an inaccesible firewall.
|
||||||
|
|
||||||
|
.. Tip::
|
||||||
|
|
||||||
|
Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron`
|
||||||
|
with a daily schedule to automatically provision all attached firewalls on a daily basis.
|
||||||
|
|
||||||
|
|
||||||
All provisioning classes known by the management machine will be shown in the table, combined with the status of each section.
|
All provisioning classes known by the management machine will be shown in the table, combined with the status of each section.
|
||||||
OPNcentral calculates if settings are equal, keeps track of changes and restarts related services when needed.
|
OPNcentral calculates if settings are equal, keeps track of changes and restarts related services when needed.
|
||||||
@ -285,6 +305,8 @@ You can either selectlively reconfigure specific hosts with the checkbox or reco
|
|||||||
<i class="fa fa-times text-danger" style="color:#F05050"></i> Unable to connect <br/><br/>
|
<i class="fa fa-times text-danger" style="color:#F05050"></i> Unable to connect <br/><br/>
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Provisioning classes
|
Provisioning classes
|
||||||
----------------------------------------------------
|
----------------------------------------------------
|
||||||
|
|
||||||
@ -405,9 +427,10 @@ Merging categories will preserve the ones that are currently used on the remote
|
|||||||
WebGui (Administration)
|
WebGui (Administration)
|
||||||
....................................................
|
....................................................
|
||||||
|
|
||||||
To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation.
|
To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation
|
||||||
|
(or the one provided in the host configuration will be shipped).
|
||||||
|
|
||||||
.. Note:
|
.. Note:
|
||||||
|
|
||||||
Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will be
|
Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will potentially
|
||||||
overwritten in that case.
|
be overwritten in that case.
|
||||||
|
Loading…
Reference in New Issue
Block a user