diff --git a/app/scripts/modules/oracle/src/domain/IOracleLoadBalancer.ts b/app/scripts/modules/oracle/src/domain/IOracleLoadBalancer.ts
index f9d47b02fa8..e1d3893fe9f 100644
--- a/app/scripts/modules/oracle/src/domain/IOracleLoadBalancer.ts
+++ b/app/scripts/modules/oracle/src/domain/IOracleLoadBalancer.ts
@@ -19,7 +19,7 @@ export interface IOracleLoadBalancer extends ILoadBalancer {
   shape: string; // required
   isPrivate: boolean; // required
   subnets: IOracleSubnet[]; // required 1 for private LB, 2 for public LB
-  certificates: IOracleListenerCertificate[];
+  certificates?: { [name: string]: IOracleListenerCertificate };
   listeners?: { [name: string]: IOracleListener }; // not required to create LB, but useless without it
   hostnames?: IOracleHostname[];
   backendSets?: { [name: string]: IOracleBackEndSet }; // not required to create LB, but useless without it
@@ -63,6 +63,8 @@ export interface IOracleBackEndSet {
   policy: LoadBalancingPolicy;
   healthChecker: IOracleBackendSetHealthCheck;
   // TODO desagar sessionPersistenceConfiguration?: IOracleLoadBalancerSessionPersistenceConfiguration;
+  backends: any[];
+  isNew: boolean;
 }
 
 export interface IOracleListenerCertificate {
@@ -71,6 +73,7 @@ export interface IOracleListenerCertificate {
   caCertificate: string;
   privateKey: string;
   passphrase: string;
+  isNew: boolean;
 }
 
 export interface IOracleBackendSetHealthCheck {
@@ -92,6 +95,7 @@ export interface IOracleLoadBalancerUpsertCommand extends ILoadBalancerUpsertCom
   shape: string; // required
   isPrivate: boolean; // required
   subnetIds: string[]; // required 1 for private LB, 2 for public LB
+  certificates?: { [name: string]: IOracleListenerCertificate };
   listeners?: { [name: string]: IOracleListener }; // not required to create LB, but useless without it
   hostnames?: IOracleHostname[];
   backendSets?: { [name: string]: IOracleBackEndSet }; // not required to create LB, but useless without it
diff --git a/app/scripts/modules/oracle/src/loadBalancer/configure/backendSets.html b/app/scripts/modules/oracle/src/loadBalancer/configure/backendSets.html
index f355c9f2cd6..2e758688895 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/configure/backendSets.html
+++ b/app/scripts/modules/oracle/src/loadBalancer/configure/backendSets.html
@@ -14,11 +14,13 @@
         </thead>
         <tbody>
           <tr ng-repeat="backendSet in ctrl.backendSets">
-            <td>
+            <td ng-if="backendSet.isNew">
               <input class="form-control input-sm" ng-model="backendSet.name" required
                      ng-focus="prevBackendSetNames[$index] = backendSet.name"
                      ng-blur="ctrl.backendSetNameChanged($index)"/>
             </td>
+            <td ng-if="!backendSet.isNew">{{backendSet.name}}
+            </td>
             <td>
               <select class="form-control input-sm" ng-model="backendSet.policy" ng-options="policy for policy in ctrl.loadBalancingPolicies"></select>
             </td>
@@ -31,8 +33,10 @@
             <td>
               <input class="form-control input-sm" ng-model="backendSet.healthChecker.urlPath" required/>
             </td>
-            <td><a href class="sm-label" ng-click="ctrl.removeBackendSet($index)"><span
-              class="glyphicon glyphicon-trash"></span></a></td>
+            <td>
+              <a href class="sm-label" ng-if="ctrl.isBackendSetRemovable($index)"
+                 ng-click="ctrl.removeBackendSet($index)"><span class="glyphicon glyphicon-trash"></span></a>
+            </td>
           </tr>
         </tbody>
         <tfoot>
diff --git a/app/scripts/modules/oracle/src/loadBalancer/configure/certificates.html b/app/scripts/modules/oracle/src/loadBalancer/configure/certificates.html
index 6c9ba8d75e4..03becf8864b 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/configure/certificates.html
+++ b/app/scripts/modules/oracle/src/loadBalancer/configure/certificates.html
@@ -13,29 +13,33 @@
         </thead>
         <tbody>
           <tr ng-repeat="cert in ctrl.certificates">
-            <td>
+            <td ng-if="!cert.isNew">{{cert.certificateName}}</td>
+            <td ng-if="cert.isNew">
               <input class="form-control input-sm" ng-model="cert.certificateName" required
                      ng-focus="prevCertNames[$index] = cert.name"
                      ng-blur="ctrl.certNameChanged($index)"/>
             </td>
             <td>
-              <textarea ng-model="cert.publicCertificate" required
+              <textarea ng-if="cert.isNew" ng-model="cert.publicCertificate" required
                         class="form-control input-sm"></textarea>
             </td>
             <td>
-              <textarea ng-model="cert.caCertificate"
+              <textarea ng-if="cert.isNew" ng-model="cert.caCertificate"
                         class="form-control input-sm"></textarea>
             </td>
             <td>
-              <textarea ng-model="cert.privateKey" required
+              <textarea ng-if="cert.isNew" ng-model="cert.privateKey" required
                         class="form-control input-sm"></textarea>
             </td>
             <td>
-              <textarea ng-model="cert.passphrase"
+              <textarea ng-if="cert.isNew" ng-model="cert.passphrase"
                         class="form-control input-sm"></textarea>
             </td>
-            <td><a href class="sm-label" ng-click="ctrl.removeCert($index)"><span
-              class="glyphicon glyphicon-trash"></span></a></td>
+            <td>
+              <a href class="sm-label" ng-if="ctrl.isCertRemovable($index)"
+                 ng-click="ctrl.removeCert($index)"><span class="glyphicon glyphicon-trash"></span>
+              </a>
+            </td>
           </tr>
         </tbody>
         <tfoot>
@@ -48,7 +52,6 @@
           </tr>
         </tfoot>
       </table>
-
     </div>
   </div>
 </div>
diff --git a/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.spec.ts b/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.spec.ts
index 6cc524bb94a..966161003d2 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.spec.ts
+++ b/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.spec.ts
@@ -94,7 +94,7 @@ describe('Controller: oracleCreateLoadBalancerCtrl', function() {
     expect(controller.backendSets[0].policy).toEqual(LoadBalancingPolicy.ROUND_ROBIN);
     expect(controller.backendSets[0].healthChecker.protocol).toEqual('HTTP');
     expect(controller.backendSets[0].healthChecker.port).toEqual(80);
-    expect(controller.backendSets[0].healthChecker.urlPath).toEqual('/healthZ');
+    expect(controller.backendSets[0].healthChecker.urlPath).toEqual('/');
   });
 
   it('correctly creates default certificate', function() {
@@ -103,6 +103,35 @@ describe('Controller: oracleCreateLoadBalancerCtrl', function() {
     expect(controller.certificates[0].certificateName).toEqual('certificate1');
   });
 
+  it('adds & removes certificate', function() {
+    controller.addCert();
+    expect(controller.certificates).toBeDefined();
+    expect(controller.certificates.length).toEqual(2);
+    expect(controller.certificates[1].certificateName).toEqual('certificate2');
+    controller.removeCert(0);
+    expect(controller.certificates.length).toEqual(1);
+    expect(controller.certificates[0].certificateName).toEqual('certificate2');
+  });
+
+  it('cannot remove certificate if used by listener', function() {
+    const newCertName = 'myCert';
+    controller.addCert();
+    expect(controller.certificates.length).toEqual(2);
+    controller.certificates[1].certificateName = newCertName;
+    controller.certNameChanged(1);
+    controller.addListener();
+    controller.listeners[1].isSsl = true;
+    controller.listeners[1].sslConfiguration = {
+      certificateName: newCertName,
+      verifyDepth: 0,
+      verifyPeerCertificates: false,
+    };
+    expect(controller.isCertRemovable(1)).toEqual(false);
+    controller.removeListener(1);
+    expect(controller.isCertRemovable(1)).toEqual(true);
+    controller.removeCert(1);
+  });
+
   it('changed backend set name updates listener', function() {
     expect(controller.listeners[0].defaultBackendSetName).toEqual('backendSet1');
     controller.backendSets[0].name = 'UpdatedBackendSetName';
@@ -110,6 +139,19 @@ describe('Controller: oracleCreateLoadBalancerCtrl', function() {
     expect(controller.listeners[0].defaultBackendSetName).toEqual('UpdatedBackendSetName');
   });
 
+  it('cannot remove backendset if used by listener', function() {
+    const newBackendSetName = 'myBackendSet';
+    controller.addBackendSet();
+    controller.addListener();
+    controller.backendSets[1].name = newBackendSetName;
+    controller.backendSetNameChanged(1);
+    controller.listeners[1].defaultBackendSetName = newBackendSetName;
+    expect(controller.isBackendSetRemovable(1)).toEqual(false);
+    controller.removeListener(1);
+    expect(controller.isBackendSetRemovable(1)).toEqual(true);
+    controller.removeBackendSet(1);
+  });
+
   it('remove backend set updates listener', function() {
     controller.removeBackendSet(0);
     expect(controller.listeners[0].defaultBackendSetName).not.toBeDefined();
diff --git a/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.ts b/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.ts
index 09fd3242855..55b1a5ad40c 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.ts
+++ b/app/scripts/modules/oracle/src/loadBalancer/configure/createLoadBalancer.controller.ts
@@ -121,6 +121,11 @@ export class OracleLoadBalancerController implements IController {
         this.backendSets.push(this.$scope.loadBalancerCmd.backendSets[b]);
       });
     }
+    if (this.$scope.loadBalancerCmd.certificates) {
+      Object.keys(this.$scope.loadBalancerCmd.certificates).forEach(b => {
+        this.certificates.push(this.$scope.loadBalancerCmd.certificates[b]);
+      });
+    }
   }
 
   public initializeController() {
@@ -334,6 +339,20 @@ export class OracleLoadBalancerController implements IController {
     });
   }
 
+  public isBackendSetRemovable(idx: number): boolean {
+    const backendSet = this.backendSets[idx];
+    if (backendSet && backendSet.backends && backendSet.backends.length > 0) {
+      return false;
+    }
+    let hasListener = false;
+    this.listeners.forEach(lis => {
+      if (lis.defaultBackendSetName === backendSet.name) {
+        hasListener = true;
+      }
+    });
+    return !hasListener;
+  }
+
   public addBackendSet() {
     const nameSuffix: number = this.backendSets.length + 1;
     const name: string = 'backendSet' + nameSuffix;
@@ -350,13 +369,24 @@ export class OracleLoadBalancerController implements IController {
     }
   }
 
+  public isCertRemovable(idx: number): boolean {
+    const cert = this.certificates[idx];
+    let hasListener = false;
+    this.listeners.forEach(lis => {
+      if (lis.isSsl && lis.sslConfiguration && lis.sslConfiguration.certificateName === cert.certificateName) {
+        hasListener = true;
+      }
+    });
+    return !hasListener;
+  }
+
   public removeCert(idx: number) {
     const cert = this.certificates[idx];
     this.certificates.splice(idx, 1);
     this.$scope.prevCertNames.splice(idx, 1);
     // Also clear the certificateName field of any listeners who are using this certificate
     this.listeners.forEach(lis => {
-      if (lis.sslConfiguration.certificateName === cert.certificateName) {
+      if (lis.sslConfiguration && lis.sslConfiguration.certificateName === cert.certificateName) {
         lis.sslConfiguration.certificateName = undefined;
       }
     });
@@ -372,9 +402,11 @@ export class OracleLoadBalancerController implements IController {
   public certNameChanged(idx: number) {
     const prevName = this.$scope.prevCertNames && this.$scope.prevCertNames[idx];
     if (prevName && prevName !== this.certificates[idx].certificateName) {
-      this.listeners.filter(lis => lis.sslConfiguration.certificateName === prevName).forEach(lis => {
-        lis.sslConfiguration.certificateName = this.certificates[idx].certificateName;
-      });
+      this.listeners
+        .filter(lis => lis.sslConfiguration && lis.sslConfiguration.certificateName === prevName)
+        .forEach(lis => {
+          lis.sslConfiguration.certificateName = this.certificates[idx].certificateName;
+        });
     }
   }
 
@@ -404,7 +436,7 @@ export class OracleLoadBalancerController implements IController {
         });
       }
 
-      if (this.backendSets.length > 0) {
+      if (this.backendSets) {
         this.$scope.loadBalancerCmd.backendSets = this.backendSets.reduce(
           (backendSetsMap: { [name: string]: IOracleBackEndSet }, backendSet: IOracleBackEndSet) => {
             backendSetsMap[backendSet.name] = backendSet;
@@ -414,7 +446,7 @@ export class OracleLoadBalancerController implements IController {
         );
       }
 
-      if (this.listeners.length > 0) {
+      if (this.listeners) {
         this.$scope.loadBalancerCmd.listeners = this.listeners.reduce(
           (listenersMap: { [name: string]: IOracleListener }, listener: IOracleListener) => {
             listener.name = listener.protocol + '_' + listener.port;
@@ -425,10 +457,14 @@ export class OracleLoadBalancerController implements IController {
         );
       }
 
-      if (this.certificates.length > 0) {
+      if (this.certificates) {
         this.$scope.loadBalancerCmd.certificates = this.certificates.reduce(
           (certMap: { [name: string]: IOracleListenerCertificate }, cert: IOracleListenerCertificate) => {
             certMap[cert.certificateName] = cert;
+            if (!cert.isNew) {
+              // existing certificate sends only the name
+              certMap[cert.certificateName].publicCertificate = null;
+            }
             return certMap;
           },
           {},
diff --git a/app/scripts/modules/oracle/src/loadBalancer/configure/editLoadBalancer.html b/app/scripts/modules/oracle/src/loadBalancer/configure/editLoadBalancer.html
index 65555a5b617..ee90d038721 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/configure/editLoadBalancer.html
+++ b/app/scripts/modules/oracle/src/loadBalancer/configure/editLoadBalancer.html
@@ -1,5 +1,8 @@
-<form name="form" novalidate validate-on-submit>
-<v2-modal-wizard heading="Edit {{loadBalancer.name}}: {{loadBalancer.region}}: {{loadBalancer.credentials}}" task-monitor="taskMonitor">
+<form name="form" class="form-horizontal" novalidate validate-on-submit>
+<v2-modal-wizard heading="Edit Load Balancer {{ctrl.loadBalancer.name}}" task-monitor="taskMonitor" dismiss="$dismiss()">
+  <v2-wizard-page key="Certificates" label="SSL Certificates" done="true">
+    <ng-include src="ctrl.pages.certificates"></ng-include>
+  </v2-wizard-page>
   <v2-wizard-page key="Backend Sets" label="Backend Sets" done="true">
     <ng-include src="ctrl.pages.backendSets"></ng-include>
   </v2-wizard-page>
diff --git a/app/scripts/modules/oracle/src/loadBalancer/details/loadBalancerDetail.controller.ts b/app/scripts/modules/oracle/src/loadBalancer/details/loadBalancerDetail.controller.ts
index 85f7d7f52df..07fa35ab8cc 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/details/loadBalancerDetail.controller.ts
+++ b/app/scripts/modules/oracle/src/loadBalancer/details/loadBalancerDetail.controller.ts
@@ -105,9 +105,9 @@ export class OracleLoadBalancerDetailController implements IController {
   public editLoadBalancer() {
     this.$uibModal.open({
       templateUrl: require('oracle/loadBalancer/configure/editLoadBalancer.html'),
-      // controller: 'oracleCreateLoadBalancerCtrl as ctrl',
       controller: OracleLoadBalancerController,
       controllerAs: 'ctrl',
+      size: 'lg',
       resolve: {
         application: () => {
           return this.app;
diff --git a/app/scripts/modules/oracle/src/loadBalancer/loadBalancer.transformer.ts b/app/scripts/modules/oracle/src/loadBalancer/loadBalancer.transformer.ts
index a197387bf67..44fcd9488ec 100644
--- a/app/scripts/modules/oracle/src/loadBalancer/loadBalancer.transformer.ts
+++ b/app/scripts/modules/oracle/src/loadBalancer/loadBalancer.transformer.ts
@@ -58,6 +58,7 @@ export class OracleLoadBalancerTransformer {
       shape: loadBalancer.shape,
       isPrivate: loadBalancer.isPrivate,
       subnetIds: loadBalancer.subnets.map(subnet => subnet.id),
+      certificates: loadBalancer.certificates,
       listeners: loadBalancer.listeners,
       hostnames: loadBalancer.hostnames,
       backendSets: loadBalancer.backendSets,
@@ -104,7 +105,9 @@ export class OracleLoadBalancerTransformer {
     return {
       name: name,
       policy: LoadBalancingPolicy.ROUND_ROBIN,
-      healthChecker: { protocol: 'HTTP', port: 80, urlPath: '/healthZ' },
+      healthChecker: { protocol: 'HTTP', port: 80, urlPath: '/' },
+      backends: [],
+      isNew: true,
     };
   }
 
@@ -123,6 +126,7 @@ export class OracleLoadBalancerTransformer {
       caCertificate: undefined,
       privateKey: undefined,
       passphrase: undefined,
+      isNew: true,
     };
   }
 }
diff --git a/app/scripts/modules/oracle/src/serverGroup/configure/serverGroupConfiguration.service.js b/app/scripts/modules/oracle/src/serverGroup/configure/serverGroupConfiguration.service.js
index 2d7a66389d6..c451c782733 100644
--- a/app/scripts/modules/oracle/src/serverGroup/configure/serverGroupConfiguration.service.js
+++ b/app/scripts/modules/oracle/src/serverGroup/configure/serverGroupConfiguration.service.js
@@ -197,6 +197,11 @@ module.exports = angular
           backingData.filtered.shapes = shapesMap;
           backingData.filtered.allShapes = _.uniqBy(_.flatten(_.values(shapesMap)), 'name');
           command.backingData = backingData;
+          if (command.account) {
+            loadLoadBalancers(command);
+            backingData.loadBalancerOnChange();
+            backingData.backendSetOnChange();
+          }
         });
     }