Controllerless Networks

last person joined: 2 hours ago 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

Replacing instant cluster https certificate

This thread has been viewed 18 times
  • 1.  Replacing instant cluster https certificate

    Posted May 20, 2021 01:20 PM
    Hi All,

    I'm running an  Instant cluster (8.7.x) and am having an issue replacing my  https certificate.  When i go to the maintenence/certificate  web page, insted of getting the usual options  to import a file with  the key/pem  files,  the web page just blanks out and there are no options to do anything .

    Is there a cli command to revert to default https cert  so I can see if thatll cause the gui page to appear ... or can you import the key/cert/ca  file via the gui?

    Rgds
    Alex

    ------------------------------
    Alex Sharaz
    ------------------------------


  • 2.  RE: Replacing instant cluster https certificate

    Posted May 20, 2021 03:09 PM
    ok so if i switch to  the old gui i can see the certs and upload a new one.... problem is the gui says its uplaoded the cert successfully but nothing has changed.

    Also the cli commands to deletge a cert fail if you are using the cert ... but cant find how to de-assign a cert

    A

    ------------------------------
    Alex Sharaz
    ------------------------------



  • 3.  RE: Replacing instant cluster https certificate

    Posted May 20, 2021 05:05 PM
    .... and sorted. Airwave is your friend. uplaoded new certs to airewave and used that to load certs into the instant APs so now I have a Lets Encrypt  issued cert for captive portal and  web UI  on my instant  cluster

    A

    ------------------------------
    Alex Sharaz
    ------------------------------



  • 4.  RE: Replacing instant cluster https certificate

    Posted May 21, 2021 09:29 AM
    Hey, have you tried different browsers so it can show you the options in the GUi? 
    If it's managed by Airwave it´ll probably not let you do anything directly in the AP GUI.

    ------------------------------
    Ulises Cazares
    ------------------------------



  • 5.  RE: Replacing instant cluster https certificate

    Posted May 21, 2021 10:05 AM
    Yup tried firefox and safari … same result.

    However when I switched to the old GUI I could see the old certs. As they were all let’s encrypt ones, not only had the cert expired but also the CA

    The old CA let me upload new cert ( fairly sure I got the order of key and certs right) and it told me that it had uploaded and installed the new cert correctly, but no change sadly so ...

    as the cluster was initially running standalone, I

    1). uploaded the new cert and CA to airwave
    2). configured airwave to manage the instant cluster
    3). defined instant cluster cert usage in airwave
    4). let airwave manage the instant cluster


    Net result was the cert and the CA chain were uploaded onto the instant cluster which is now using the cert for web and captive portal ..which is what I wanted … and I now have an easy (Airwave) method of upgrading the Kets Encrypt cert every 3 months


    Rgds
    Alex