ACE A2(2.2) ssl key/cert FT replication

derek wilson · ‎01-05-2010

Hi folks

We have deployed A2(2.2) Im sure I read somewhere that this should copy the cert's/keys from the active module to the standby - is thes true.

At the moment we have the stby in cold state as this has not happened. Do I still as before need to add them to both contexts (active & stanby)?

thanks

Gilles Dufour · ‎01-06-2010

Keys and certs are sensitive information. So they are not synched automatically.

The backup-restore command will now save keys and certs. But still no automatic synchronization accross the unsecure FT link.

Gilles.

derek wilson · ‎01-06-2010

Thanks for the answer - that makes sense.

1 thing though - the backup-restore cmd - not one ive seen Ive been through the cli cmd doc http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A2/command/reference/ACE_cr.pdf cant see it in there either??

Tried finding it on the actual module - no luck either - is it hidden?

thanks