Archives/opensense-docs
2
0
Fork 0
mirror of https://github.com/opnsense/docs synced 2024-10-30 21:20:20 +00:00
Code Issues Projects Releases Wiki Activity

OPNcentral - add "Central WebGui certificate management" option

Browse Source
This commit is contained in:
Ad Schellevis 2023-04-10 13:21:12 +02:00
parent 4b13bd6fc7
commit a02c338d16
1 changed files with 26 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
source/vendor/deciso/opncentral.rst vendored
View File

@ -6,6 +6,9 @@ As part of the OPNsense Business Edition, Deciso offers a plugin to keep all you
an easy entry point to manage them.
.. contents:: Index
Installation
---------------------------
@ -51,6 +54,18 @@ the url from the machine and the API key and secret generated above.
<i class="fa fa-fw fa-trash-o"></i> Delete host configuration<br/><br/>
Central WebGui certificate management
......................................
The host configuration offers an option to link a central certificate to the managed host, in which case
the certificate will be distributed to the host (if :code:`WebGui` is being provisioned).
Using this feature, you're able to centrally manage certificates (manually or using ACME) easily.
.. Tip::
Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron`
with a daily schedule to automatically provision all attached firewalls on a daily basis.
Alter generic host settings
@ -268,6 +283,11 @@ inspect status and push options to the attached firewalls.
Be **very** careful pushing settings to your connected firewall which may disconnect your session, such as firewall and routing related
options. The central management host can't predict if settings you plan to make lead to an inaccesible firewall.
.. Tip::
Add :code:`OPNcentral - provision / reconfigure remote hosts` in :menuselection:`System --> Settings --> Cron`
with a daily schedule to automatically provision all attached firewalls on a daily basis.
All provisioning classes known by the management machine will be shown in the table, combined with the status of each section.
OPNcentral calculates if settings are equal, keeps track of changes and restarts related services when needed.
@ -285,6 +305,8 @@ You can either selectlively reconfigure specific hosts with the checkbox or reco
<i class="fa fa-times text-danger" style="color:#F05050"></i> Unable to connect <br/><br/>
Provisioning classes
----------------------------------------------------
@ -405,9 +427,10 @@ Merging categories will preserve the ones that are currently used on the remote
WebGui (Administration)
....................................................
To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation.
To prevent breakage after synchronisation, the certificate used by the webgui will be preserved after synchronisation
(or the one provided in the host configuration will be shipped).
.. Note:
Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will be
overwritten in that case.
Currently it's not possible to merge certificates and webgui admin settings, as the certificate store will potentially
be overwritten in that case.