Security

Reply
MVP
Posts: 1,110
Registered: ‎10-11-2011

Create Certificate Manually in CP Onboard

Is it possible to manually create and export a client certificate?  I have several iOS8 devices that need to get on the network, but onboarding is not working.  I'd like to manually issue certs as a workaround.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Guru Elite
Posts: 8,194
Registered: ‎09-08-2010

Re: Create Certificate Manually in CP Onboard

During the onboard process it gives you the option to manually download and install it.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Create Certificate Manually in CP Onboard

Is it not possible to create certificates manually via the admin GUI?  My iOS8 devices can't get past the captive portal that sits before the onboarding login.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Guru Elite
Posts: 8,194
Registered: ‎09-08-2010

Re: Create Certificate Manually in CP Onboard

You can sign server authentication CSRs but I don't think you can manually issue a client cert. Why not just use PEAP for those devices?

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Create Certificate Manually in CP Onboard

Darn.

 

I wanted to keep everything uniform - EAP TLS for all iOS devices.  Also, I can be sure that only one device per user is on the network when enforcing onboarding/certs.  Not sure if that's possible with PEAP.

 

Thanks for the feedback, Tim.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Create Certificate Manually in CP Onboard

Yes you can manually do it. Go to onboard--management we cert request
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Create Certificate Manually in CP Onboard

Stupid spell check. :)

New certificate request
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Guru Elite
Posts: 8,194
Registered: ‎09-08-2010

Re: Create Certificate Manually in CP Onboard

What he said ^^^

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Create Certificate Manually in CP Onboard

Generate a new certificate signing request?

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Aruba
Posts: 1,537
Registered: ‎06-12-2012

Re: Create Certificate Manually in CP Onboard

Yes

 

certrequest.png

Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: