Network Management

Reply
Regular Contributor I
Posts: 173
Registered: ‎10-22-2010

Setting up certificate authentication and ran in to an issue.

[ Edited ]

I have set up the certificate authentication in Airwave.

12.png

On the client PC, from which i take the webUI access, I am getting this message.

13.PNG

Community Administrator
Posts: 2,254
Registered: ‎12-03-2013

Re: Setting up certificate authentication and run in to a issue.

Do you have the proper cert installed on the pc you are using to access GUI? @rgin any other ideas?

CWNA, ACMP, Security +
Moderator
Posts: 1,251
Registered: ‎10-16-2008

Re: Setting up certificate authentication and run in to a issue.

The authentication pass should be logged in /var/log/httpd/access_log, might also check that there's no errors in /var/log/httpd/error_log.

 

Beyond that, the cert input needs to have the root ca cert and then the ssl chain cert.  If you're only providing one, then the 2 factor fails.


Rob Gin
Senior QA Engineer - Network Services
Aruba Networks, a Hewlett Packard Enterprise Company
Regular Contributor I
Posts: 173
Registered: ‎10-22-2010

Re: Setting up certificate authentication and run in to a issue.

[ Edited ]

The configuration on the amp for certificate login.. 

Config_a.PNG

 

I have a domain PC, with a user certificate, open the webUI. I get the prompt asking to select the certificate..Then.. 

client_pc - Copy.PNG

This user "Administrator" is a user in the AD, and has enrolled a user certificate. (I am doing this from the AD itself). 

 

looking the login failed, I created a user account in the the amp. the same symptom.. the login did not work.. 

user config.PNG 

 

 

Aruba Employee
Posts: 86
Registered: ‎02-19-2015

Re: Setting up certificate authentication and run in to a issue.

Certificate which you have installed in Airwave is singed by your internal AD? If yes, make sure the client mahcine have your internal CA root in trust list.

 

Have you selected two factor authentication? If yes, make sure, enter correct login details aswell when you choose two factor authentication.

Search Airheads
Showing results for 
Search instead for 
Did you mean: