Create a new Barracuda ADC machine¶
Preview feature
This feature is available in Preview and isn't yet generally available (GA). Functionality and behavior can change before GA.
Creating a machine enables Certificate Manager - SaaS to connect to a Barracuda Load Balancer ADC so it can discover the certificates that the appliance's services use and provision certificates to those services. After creating the machine, you can discover and provision certificates.
Before you begin¶
- The hostname or IP address of the Barracuda ADC management interface.
- The web interface port. You can find it on the appliance's BASIC > Administration page. The default is 8000 for HTTP and 443 for HTTPS.
- An appliance account with read and write access to services and certificates. Full administrator access isn't required.
- (Optional) Shared credentials stored in a supported credential provider.
- In Server Hostname, enter the hostname or IP address of the Barracuda ADC.
- If the appliance uses a port other than 8000, enter the port number in Port.
-
To connect over HTTPS on a port other than 443, turn on Use HTTPS.
Important
Port doesn't select the protocol on its own. Port 443 always uses HTTPS. On any other port, including 8443, the connection uses plain HTTP unless you turn on Use HTTPS, and the sign-in credentials and private keys are sent unencrypted.
-
From Credential Type, select one of the following:
- Enter Credentials to provide credentials manually.
- Select Credentials to use shared credentials from a configured credential provider.
Note
Credential types require additional licensing. The available credential options depend on your environment configuration.
-
If you selected Enter Credentials, enter the appliance account's Username and Password.
Warning
Remember to store your username and password securely when creating a new machine. For security reasons, you will not be able to modify the fields under the "Access" tab without these credentials. This ensures that only authorized individuals can modify these fields.
-
If you selected Select Credentials, choose the appropriate credential from the Credential list.
-
If the appliance's management interface uses a self-signed certificate, turn on Allow Self-Signed Certificates. The management interface uses a self-signed certificate by default.
Important
This setting accepts the appliance's certificate without verifying it. Turn it on only for an appliance you reach over a trusted internal network.
Note
When this setting is off, the common name on the appliance's management certificate must match the Server Hostname you entered. For example, a connection by IP address fails if the certificate was issued to a hostname.
-
Click Test Access to verify connectivity.
Note
If the test fails with an authentication error and you know the credentials are correct, check that the account has permission to list the appliance's virtual service groups.
-
Click Continue. The Continue button is enabled only after the connection test succeeds.
What's next?¶
- Complete machine setup by configuring discovery and provisioning schedules. See Create a new machine.
- Provision certificates to the machine. See Provision certificates to machines.
- Discover certificates already deployed on the machine to enable tracking and inventory. See Discover certificates on machines.