Controller Based WLANs

Custom Certificate support for remote AP (RAP)
Q:

How to provision the RAP with Custom certificate?



A:

Custom certificate support for Remote AP (RAP) feature by storing the Certificate Signing Request (CSR) and private key from the RAP in a USB. To provision a RAP to store the CSR and private key in a USB, use one of the following options:wim

 

AP Boot Prompt
At the AP boot prompt, issue the setenv usb_csr 1 and setenv usb_type 100 commands. If this option is used to provision the RAP to store the files in the USB device, after the files are saved in the USB, enter the AP boot prompt to issue the setenv usb_csr 0 command. This is mandatory.

 

Controller WebUI
To store the CSR and private key files from a RAP to a USB device:
1. Navigate to Configuration > Wireless > AP Installation > Provisioning.
2. Select the RAP, click Provision.
3. Under USB Settings, select the USB Parameters check box.
4. Select the USB storage for CSR/Key check box.
5. Select Device Type as storage.
6. Click Apply and Reboot.

 

Controller CLI
To store the CSR and private key files from a RAP to a USB device:
(host) (config) #provision-ap
(host) (AP provisioning) #read-bootinfo ap-name <ap name>
(host) (AP provisioning) #usb-csr
(host) (AP provisioning) #usb-type storage

 

RAP Console
To store the CSR and private key files from a RAP to a USB device:
1. Navigate to Configuration > Management > Certificates.
2. For Store CSR and key in USB/Flash, select USB from the drop-down list.

After the RAP is provisioned to store the CSR and private key in a USB, log in to the RAP console, export the CSR and private key files to the USB. A .p12 certificate file format must be manually created as the RAP certificate in
the USB to bring up the IKE/IPSEC connection.

Version History
Revision #:
2 of 2
Last update:
‎06-02-2015 04:42 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.