AAA, NAC, Guest Access & BYOD

How to restore previous certificate if private key password is not known
Requirement:

In order to restore the previously installed, need to ensure autobackup is enabled in Clearpass. You can verify the same by navigating to Administration->Server Manager->Server Configuration. Click on "Cluster-Wide Parameters". Verify if the option "Auto backup configuration options" is set to "Config".

 



Solution:

In order to restore the previous certificate if the private key password is not known, then download the autobackup config file by navigating to Administration->Server Manager->Local Shared Folders and download the backup that contains the previous certificate.

 

Once downloaded, navigate to Administration->Server Manager->Server Configuration. Click "Restore" and upload the autobackup file that contains the previous certificate. While restoring ensure the option: "Restore cluster server/node entries from backup" is selected. This will restore the previously installed certificate.

 



Configuration:

Navigate to Administration->Server Manager->Server Configuration. Click on "Cluster-Wide Parameters". Verify if the option "Auto backup configuration options" is set to "Config". This will ensure the configuration is backed up on a daily basis.

 



Verification

Before renewing the old certificate

 

 

After renewing the certificate:

 

From the latest auto-backup that contained the previous certificate, restored the backup and was able to restore the previous certificate. While restoring need to ensure the option:  "Restore cluster server/node entries from backup" is selected.

 

 

After restoring the backup, we were able to retrieve the previous certificate.

 

 

NOTE: This should be attempted only in a single node. Doing this in a cluster will restore the cluster node entries which will cause out of sync issues. Best practice in a cluster is to remove the node from cluster. Restore the certificate from auto-backup and rejoin the node to cluster.

Version History
Revision #:
2 of 2
Last update:
‎03-17-2017 04:31 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.