Security

hi,

my Aruba Controller Built-in Certificate has expired in 11 auguest 2017, could any one tell me to witch version i should upgrade my controller to get a valid certifcate.

Regards

You should not be using the default certificate. You need to acquire your own

Hi Cappali,

thank you for the answer , i know that i do not have to use it, i need to use it , because my customer can't bay a public certificate.

so could you tell to witch version I need to upgrade my Controller to get it, or not ?

Regards

You cannot use the default certificate in a production environment.

Hi Cappali,

I should not and i know the risks, now if you now a version of arubaos that it have a valid certificate tell me .

and any way thanks for your advices.

There is no valid certificate. They're self-signed and cannot be used.

I'm talking about the built in certificate , i use to work with it  but it have expired in 11/08/2017.

for the seconde time i know that i should not use a buit in , but  i need to use it.

 

It was revoked last year. You need to provide your own certificate.

cappalli

i read your article

 

https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814

 

do you have any tutorial to generate a cerificate with lets encrypt

No. LetsEncrypt is not recommended as it requires a renewal every 90 days. You can get a standard certificate for around $4.99.

http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-do-I-replace-the-default-Aruba-SSL-certificate/ta-p/178060

 

 

So upgrading the firmware is not resolving this, correct? The newer firmware versions are no longer bundled with a default certificate, is that it?

The default certificate has been self-signed for over 2 years now.