Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Create Certificate Manually in CP Onboard

This thread has been viewed 1 times

  • 1.  Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 04:03 PM

    Is it possible to manually create and export a client certificate?  I have several iOS8 devices that need to get on the network, but onboarding is not working.  I'd like to manually issue certs as a workaround.



  • 2.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 04:06 PM
    During the onboard process it gives you the option to manually download and install it.


  • 3.  RE: Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 04:11 PM

    Is it not possible to create certificates manually via the admin GUI?  My iOS8 devices can't get past the captive portal that sits before the onboarding login.



  • 4.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 04:15 PM
    You can sign server authentication CSRs but I don't think you can manually issue a client cert. Why not just use PEAP for those devices?


  • 5.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 04:19 PM
    Yes you can manually do it. Go to onboard--management we cert request


  • 6.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 04:20 PM
    Stupid spell check. :)

    New certificate request


  • 7.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 04:24 PM
    What he said ^^^


  • 8.  RE: Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 04:30 PM

    Generate a new certificate signing request?



  • 9.  RE: Create Certificate Manually in CP Onboard
    Best Answer

    EMPLOYEE
    Posted Aug 01, 2014 04:34 PM

    Yes

     

    certrequest.png



  • 10.  RE: Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 04:36 PM

    Perfect.  Thank you.



  • 11.  RE: Create Certificate Manually in CP Onboard

    EMPLOYEE
    Posted Aug 01, 2014 06:26 PM

    Take a look at this for linux clients.  It may be what you're looking for.

     

    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/TUTORIAL-How-to-generate-TLS-certificates-for-Linux-using-the/m-p/149236/highlight/true#M10727

     

     



  • 12.  RE: Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 07:43 PM
    Awesome! Thanks for the link.


  • 13.  RE: Create Certificate Manually in CP Onboard

    Posted Aug 01, 2014 04:19 PM

    Darn.

     

    I wanted to keep everything uniform - EAP TLS for all iOS devices.  Also, I can be sure that only one device per user is on the network when enforcing onboarding/certs.  Not sure if that's possible with PEAP.

     

    Thanks for the feedback, Tim.