Deploying same pfSense and configuration multiple times - security consideration
-
Hi,
I installed two pfSense 2.3 into Hyper-V VM and completely configured them. Now I would like to deploy another pfSense(s) into same / different network that will have same configuration as the two existing pfSenses.
The easiest method that I found is to export configuration, edit it in text editor and change the only things that are different – IP and name.
Then I would like to install another pfSense, import configuration and manually change two things – certificate (issued by internal Windows Server CA) and password of a local admin.My knowledge of FreeBSD / Linux is limited but I know that once I clone Linux (full clone of a VM) then I need to regenerate SSH host keys.
Could you please tell me is there something else in the config.xml file that needs to be regenerated except certificate? Some ID / GUID / security keys?
Thank you,
Luk