Forum Discussion

Travis_02_13395's avatar
Travis_02_13395
Icon for Nimbostratus rankNimbostratus
Oct 07, 2013
Solved

How to find all Wide IP's on a GTM that are using a specific SSL Cert stored on an LTM?

We are going to be renewing one of our certs here pretty soon. What we need to know is if there is an easier way of finding out which Wide IP's we have on the GTM that are utilizing a specific cert being terminated on the LTM. Reason being, we need to make all parties that may be affected by the cert renewal aware(both internal and external). What I have been doing is locating the pools on the LTM that utilize the cert, and cross referencing that with which Wide IP's on GTM use that same pool. We have many Wide IP's and this is a daunting task.

 

Is there an easier method to obtain this kind of information?

 

LTM Version: BIG-IP 10.2.4 Build 577.0 Final GTM Version: BIG-IP 10.2.4 Build 595.0 Hotfix HF3

 

  • The easiest way is probably just to manually go through /config/bigip.conf and look at the SSL client and server profile configurations and note which ones use the certificate in question. Then go through the virtual servers and see which use the SSL profiles that will be changing certificates.

     

    Hopefully your LTM virtual servers are named something that can be easily correlated to your GTM wide IPs.

     

3 Replies

  • The easiest way is probably just to manually go through /config/bigip.conf and look at the SSL client and server profile configurations and note which ones use the certificate in question. Then go through the virtual servers and see which use the SSL profiles that will be changing certificates.

     

    Hopefully your LTM virtual servers are named something that can be easily correlated to your GTM wide IPs.

     

  • That does sound a little easier that bouncing back and forth between the GUI's. I'll give this a try. Thanks you so much!

     

  • Wasn't there a search function for this at some point like Network Map? I can't seem to find it anymore.