Network Management

Contributor I

Airwave SSL certificate

Hey everyone. Aruba newbie here.


I have seen diffrent methods on how to install a signed certificate for the Aruba Airwave UI. But they all seem a bit much. 


I have a certificate and want the green mark in the browser windows (-:, 


Just upgraded to the latest version 8.2.6, and in CLI i see option 9 security--> and -->3  Add SSL Certificate, but the only option after this is "c" cancel.


Anyone know the simplest method to achieve this ?




Re: Airwave SSL certificate


Follow below artilce to install certificate in 8.2.4 and above version.



If my post address your queries, give kudos and accept as solution!

Re: Airwave SSL certificate

If you're just installing a SSL cert, then you can use the above path.  In 8.2.6, we added a new path.


1 Reset Web admin Password
2 Change OS User Password
3 Add SSL Certificate
4 Add DTLS Certificates
5 Enable FIPS (requires reboot)
6 Show EngineID
7 Module Key
8 Apply STIGs
9 Set MaxAuthTries value for sshd
10 Make OCSP Optional
11 Generate Certificate Signing Request
12 Install Signed Certificate



Using option 11 under the security menu, you can generate a CSR, then submit that CSR to the signing authority.  When you get the resulting cert, you'll upload it using the upload option off the main menu.  Then install the cert using option 12 under the security menu - NOTE: The file must be in PEM format with the filename extension ".crt"

Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
New Contributor

Re: Airwave SSL certificate

Is it possible to specify a SAN when generating the CSR in the new CLI?




Contributor II

Re: Airwave SSL certificate

Do you upload a single PEM file with the cert and intermediate/roots too?




Re: Airwave SSL certificate


We don't currently support generating SAN Cert through this CSR process.  That'd be a feature request currently.



If you're doing the CSR route, you don't have an option to make changes to the resulting PEM file.  But if you're going the SSL route, then the pkcs12 file you upload should have the cert and intermediates combined.

Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Search Airheads
Showing results for 
Search instead for 
Did you mean: