Data Center

Reply
Occasional Contributor II
Posts: 48
Registered: ‎10-16-2014

Aruba IAP - Captive Portal Certificate Error

Hello,

One of our customers is having a problem with their Captive Portal on IAP. The Captive Portal uses WPA2 for authentication and also captive portal internal database for user authentication. 

When a Windows Mobile 10 device tries to connect it gets an IP address but before the Captive Portal page appears they get the following error: -

 

We are having trouble with the site's security certificate, it looks like the security certificate was not issued by a trusted certificate authority.

 

The system is running 6.4.4.6-4.2.4.0_55341 Android phones can connect but they are having big problems with Windows Mobile.

 

Is there a workaround for this?

Guru Elite
Posts: 21,026
Registered: ‎03-29-2007

Re: Aruba IAP - Captive Portal Certificate Error

What CA issued the certificate?  If it is a public CA, they need to find out if it is trusted by those clients by default.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 48
Registered: ‎10-16-2014

Re: Aruba IAP - Captive Portal Certificate Error

The IAP just has the deaulf certificate on it.

Guru Elite
Posts: 21,026
Registered: ‎03-29-2007

Re: Aruba IAP - Captive Portal Certificate Error

[ Edited ]

The default Certificate is not trusted by any clients.  If the customer wants that error message to go away, they need to obtain and upload a public certificate.

https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814

 

Aruba used to include a public certificate in all of its Instant devices, but they were the same public certificate.  That certificate was revoked by the CA that issued it.  To improve security, the latest builds of instant generate a self-signed certificate, but the customer needs to obtain their own public certificate for captive portal and upload it to instant, if they want that message to go away.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 48
Registered: ‎10-16-2014

Re: Aruba IAP - Captive Portal Certificate Error

Ah, thanks Colin.

 

Would any Public SSL cert do the job?

This is cheap enough and says 99.9% browser compatability.

https://cheapsslsecurity.co.uk/rapidssl/rapidsslcertificate.html

 

 

Occasional Contributor II
Posts: 48
Registered: ‎10-16-2014

Re: Aruba IAP - Captive Portal Certificate Error

Ah, thanks Colin.

 

Would any Public SSL cert do the job?

 

I have found a cheap one from RapidSSL and say 99.9% browser compatibity.

 

Guru Elite
Posts: 21,026
Registered: ‎03-29-2007

Re: Aruba IAP - Captive Portal Certificate Error

I cannot endorse any CA provider, but if they say that, please follow the instructions in the advisory to generate a CSR (Instant cannot initiate a CSR, so you have to do that offline and submit to the CA).



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: