Wireless Access

Reply
MVP
Posts: 3,009
Registered: ‎10-25-2011

ArubaOS Default Certificate Revocation

Question regarding this:

There wont be any firmware upgrade that fix this automatically?

 

or you do have to generate and install the selft server certificate? or use a public certificate authority?

 

If you want to use a self server certificate on instants aps is there a way to do this?

 

Cheers

Carlos

 

 

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: ArubaOS Default Certificate Revocation

No there will not. Default certificates will no longer be provided. You
should acquire a public certificate for use with Captive Portal.



A FAQ article will be posted very soon.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: ArubaOS Default Certificate Revocation

For instant aps the only way to go is with teh public cetificate??

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: ArubaOS Default Certificate Revocation

For all platforms that included a default certificate (controller, IAP,
MAS), yes.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: ArubaOS Default Certificate Revocation

Tim i was askign you that because on the controller you can generate and install a selft server certificate.. but im not sure if you can do that with instant.. neither with the MAS

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: ArubaOS Default Certificate Revocation

Self-signed certificates will throw a browser error during captive portal
authentication. A publicly signed certificate would be required to prevent
the browser error.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: ArubaOS Default Certificate Revocation

Tim im already aware of that

Is there an option of Selft server certificate on instant?

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite
Posts: 8,633
Registered: ‎09-08-2010

Re: ArubaOS Default Certificate Revocation

You would need to generate the self-signed cert with something like openssl
and then upload it.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: ArubaOS Default Certificate Revocation

Got it Tim Thank you

It just that there are some clients which didnt want to buy a certificate and didnt care about the warning for their  guest users or for the administration of the device...

I need a work around while they can purshase this public certificate... and this is something that can work.   We will remind them again this is the way to go.  

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
New Contributor
Posts: 4
Registered: ‎06-02-2016

Re: ArubaOS Default Certificate Revocation

For a small customer, they do not have a CA readily available to create a self-signed certificate.  There are internet blogs on how to create self-signed certificates on IIS 7 and Apache but it would reduce the angst in the field if we had a simple recipe card on how to bake the "self-signed certificate" cake.

Search Airheads
Showing results for 
Search instead for 
Did you mean: