Q: How to provision the RAP with Custom certificate?
A: Custom certificate support for Remote AP (RAP) feature by storing the Certificate Signing Request (CSR) and private key from the RAP in a USB. To provision a RAP to store the CSR and private key in a USB, use one of the following options:wim
AP Boot Prompt
At the AP boot prompt, issue the setenv usb_csr 1 and setenv usb_type 100 commands. If this option is used to provision the RAP to store the files in the USB device, after the files are saved in the USB, enter the AP boot prompt to issue the setenv usb_csr 0 command. This is mandatory.
Controller WebUI
To store the CSR and private key files from a RAP to a USB device:
1. Navigate to Configuration > Wireless > AP Installation > Provisioning.
2. Select the RAP, click Provision.
3. Under USB Settings, select the USB Parameters check box.
4. Select the USB storage for CSR/Key check box.
5. Select Device Type as storage.
6. Click Apply and Reboot.
Controller CLI
To store the CSR and private key files from a RAP to a USB device:
(host) (config) #provision-ap
(host) (AP provisioning) #read-bootinfo ap-name <ap name>
(host) (AP provisioning) #usb-csr
(host) (AP provisioning) #usb-type storage
RAP Console
To store the CSR and private key files from a RAP to a USB device:
1. Navigate to Configuration > Management > Certificates.
2. For Store CSR and key in USB/Flash, select USB from the drop-down list.
After the RAP is provisioned to store the CSR and private key in a USB, log in to the RAP console, export the CSR and private key files to the USB. A .p12 certificate file format must be manually created as the RAP certificate in
the USB to bring up the IKE/IPSEC connection.