Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

wildcard certificates

This thread has been viewed 10 times

  • 1.  wildcard certificates

    Posted Dec 02, 2014 11:02 AM

    I requested certificates for use on my 6300 from the certificate gurus here in the organisation.

    I originally requested six - two for the aruba master , standby , and four for our local m3 cards. I was going to generate a CSR on each card individually with the common name that corresponded with each cards FQDN.  However, they just gave me one certificate for all my devices  with a CSR generated offline themselves,with one common name .    I was not surprised when the controller card did not accept it.   My question is - can the controller accept wildcard certificates, created in this way?



  • 2.  RE: wildcard certificates

    EMPLOYEE
    Posted Dec 02, 2014 11:33 AM

    The controller can accept wildcard certificates.  http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-does-Aruba-Controller-work-with-wild-card-certificate-for/ta-p/203199

     

    The controller can accept certificates where the CSR is generated offline.  - http://community.arubanetworks.com/t5/Mobility-Hero-Tutorials/How-to-replace-SSL-certificate-Nov-2013/ta-p/145695

     

     

     

     



  • 3.  RE: wildcard certificates

    Posted Dec 21, 2014 10:07 AM

    just remember that using a wildcard cert for radius authentication is not a good idea, not all devices will like that.