Controllerless Networks

Reply
Contributor II

Can you change the Instant GUI management certificate?

Hi,

 

Does anyone know if you can change the inbuilt certificate used for the HTTPS management GUI from instant.arubanetworks.com to another certificate, for example an internal CA  certificate to remove the security warning when browseing to the virtual controller to manage it.

 

cheers

 

Dave

 

Re: Can you change the Instant GUI management certificate?

https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1481

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor II

Re: Can you change the Instant GUI management certificate?

Thanks, If i have understtod this correctly it looks to be creating a new root CA and computer cert to then install on the Instant, this root CA would then need to be installed on any clients browsing on to the GUI to trust it.

 

What i actually need to do is use an existing miscosoft Domain CA to issue a cert for the Instant as the root CA is already on the clients.

 

Is this possible ?

 

Dave

 

 

 

Guru Elite

Re: Can you change the Instant GUI management certificate?

Do you have access to the ADCS server? Use the IIS snap-in to create a certificate signing request and then use the ADCS web UI to request the certificate. It will just be a standard SSL server certificate.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Can you change the Instant GUI management certificate?

OK, i managed to create a CSR and get a cert for the Aruba Instant. but its not being used as the defualt cert, how do i make it the default?

 

Thanks

 

Dave

 

New Contributor

Re: Can you change the Instant GUI management certificate?

Same problem as well. How to change the default certificate to point it to the new certificate?

Contributor II

Re: Can you change the Instant GUI management certificate?

Someone must have done this? or does everyone just live with the security warning when logging into an instant VC ?

 

Seems a little unprofessional to leave an install like this.

 

Dave

 

Re: Can you change the Instant GUI management certificate?

Click on Maintenance -> Certificates -> Upload new certificate
Pasquale Monardo | Senior Network Solutions Consultant
ACDX #420 | ACMP
[If you found my post helpful, please give kudos!]
New Contributor

Re: Can you change the Instant GUI management certificate?

Same issue here, managed to upload the certificate.  But it isn't used by the web UI ?

How do you change the certificate binding ?

New Contributor

Re: Can you change the Instant GUI management certificate?

Also trying to do this... although I would at least like to generate a self-signed certificate - like every other vendor can do:

 

crypto ssl generate rsa 2048 location-ap-1.company.com (or something similar)

 

Why isn't this kind of thing available ?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: