Connecting to the Admin UI

After your new Traffic Manager instance has been created, click through to the instance details page and locate the External IP field. Type this address into your Web browser, together with port 9090, to access the Admin UI for your instance:

https://<admin_ui_address>:9090/

While the internal IP address of an instance remains constant over it’s lifetime regardless of state, the external IP address is allocated at run time and therefore might not remain the same after an instance restart.

When you connect to the Admin UI for the first time, the Traffic Manager requires you to complete the initial configuration wizard. See Using the Initial Configuration Wizard.

During initial configuration, you must enter a one-time generated password to confirm your ownership of the instance. Obtain this password from the instance serial console output, a link to which is displayed on the instance details screen, and apply it when requested during the initial configuration wizard.

Alternatively, run the following gcloud compute API command:

gcloud compute instances get-serial-port-output <instance_name>

<instance_name> is the unique name of the instance you are configuring.

The same link is provided in the initial configuration wizard.

Confirming the Traffic Manager's Identity

Before you connect to the Admin UI of a newly configured Traffic Manager instance, your Web browser might report problems with the SSL certificate (either that it cannot trust it, or that the hostname in the certificate does not match the hostname in the URL). You can safely ignore this warning as the certificate is self-signed, and the hostname in the certificate might not match the URL you have used to access it (an instance's external IP address is different to the private IP address the instance uses within the GCE network).

To verify the identity of the instance you are connecting to, check that the SHA-1 fingerprint of the self-signed SSL certificate matches the fingerprint of the Traffic Manager instance you want to configure. Consult the documentation for your Web browser for instructions on how to display the SSL certificate and associated SHA-1 fingerprint information for a Web site you are visiting.

To view the SHA-1 fingerprint for a Traffic Manager instance configured in GCE, check the instance console. Click "Serial console output" in the instance details page in the GCE Web portal, or run the following gcloud compute API command:

gcloud compute instances get-serial-port-output <instance_name>

<instance_name> is the unique name of the instance you are configuring.

There might be a delay of several minutes after instance creation before the console output is available.