Configuration Lock

Overview

Configuration Lock is a feature of ZEDEDA Cloud that enables you to exclude an edge node from automated configuration updates to your fleet of edge nodes.

You can enable Configuration Lock on individual edge nodes or at the project level. When you enable Configuration Lock on a project, the feature will be enabled on all edge nodes that belong to that project. When you onboard a new edge node to a project that has Configuration Lock enabled, the new node will have the feature enabled by default.

Note: Configuration Lock is only available on projects with the Legacy type.

When you enable Configuration Lock on an edge node, the node will queue automatic updates rather than applying them. When you disable Configuration Lock on an edge node, its queued updates will be applied.

There are some configuration updates that will bypass a configuration lock. The following Lifecycle events will each generate a new configuration:

• device reboot
• activation or deactivation of edge-view

You can also manually push specific configuration updates to a locked node using the ZEDEDA API. Through the API, you can also see the "latest device configuration", which lists all updates that are queued but not applied. 

Procedures

View an edge node's configuration status

1. Log in to the ZEDEDA GUI.
2. Click on Edge Nodes on the left side nav.
3. Click on the edge node that you want to view.
4. Scroll to the configuration section in the edge node's Status tab.
5. Observe the last configurations fetched and generated.
6. Optional: click Show Details to see the differences between the last fetched and last generated configurations.

Enable or disable Configuration Lock on an edge node

1. Log in to the ZEDEDA GUI.
2. Click on Edge Nodes on the left side nav.
3. Click on the edge node that you want to view.
4. Click on the Basic Info tab.
5. Observe the value of the Configuration Lock field.
6. Click the Edit icon.
7. Toggle the Configuration Lock value.
8. Click Save.
9. Verify the value of the Configuration Lock field.

Enable or disable Configuration Lock on a legacy project

1. Log in to the ZEDEDA GUI.
2. Hover over Administration on the left side nav and click on Projects.
3. Click on the project that you want to configure.
4. Click on the project's Policies tab.
5. Click the Edit icon.
6. Check the Configuration Lock Policy option.
7. Click Save.