Wireless Access

Reply
Occasional Contributor I
Posts: 6
Registered: ‎09-30-2016

IAP-225 Virtual Controller SSL Certificate

Hi All!

 

I'm using a set of Aruba IAP-225 Access Points with a Virtual Controller.
My Network has  WPA2-Enterprise 802.1X encryption.

 

Recently I saw information online  that the certificate shipped with the device was compromised and is not safe to use.
I wanted to change it with my own one and encountered a problem.


The WebUI only let's me upload the certificate but not manage them.
The tutorial says that using the 'clear-cert' CLI command I can erase certificates, but it only let's me delete the ones I uploaded myself not the ones that were put there by the manufacturer.

Am I missing something?
Is there a way to change the default certificate that is used for WPA2-Enterprise encryption?

Guru Elite
Posts: 8,460
Registered: ‎09-08-2010

Re: IAP-225 Virtual Controller SSL Certificate

You set the usage when you upload the certificate. There is a drop down box.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 6
Registered: ‎09-30-2016

Re: IAP-225 Virtual Controller SSL Certificate

I get this error if I try to chose anything other than CA.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: IAP-225 Virtual Controller SSL Certificate

Is there a radius server in your environment?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎09-30-2016

Re: IAP-225 Virtual Controller SSL Certificate

No, I use ldap integration directly from the Virtual Controller.

Guru Elite
Posts: 21,029
Registered: ‎03-29-2007

Re: IAP-225 Virtual Controller SSL Certificate

Where did you obtain your certificate?

 

What format is it in?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor I
Posts: 6
Registered: ‎09-30-2016

Re: IAP-225 Virtual Controller SSL Certificate

Bought it on GoDaddy.

Guru Elite
Posts: 8,460
Registered: ‎09-08-2010

Re: IAP-225 Virtual Controller SSL Certificate

Did you combine the private and public keys with the cert chain in a .pem
file?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 5
Registered: ‎10-04-2016

Re: IAP-225 Virtual Controller SSL Certificate

Hello All,

 

Ok so I've tried all the instructions I could find on using Openssl to create a self signed certificate to use temporarily until we purchase our new certificate. When I try uploading it says wrong format. Any suggestions before I contact support?

Guru Elite
Posts: 8,460
Registered: ‎09-08-2010

Re: IAP-225 Virtual Controller SSL Certificate

Did you follow the instructions here: https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: