Controllerless Networks

 View Only
last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

IAP certificates after 8.7 - only one for both CP and WUI/adminUI?

This thread has been viewed 13 times

  • 1.  IAP certificates after 8.7 - only one for both CP and WUI/adminUI?

    Posted Oct 13, 2021 08:35 AM
    Hi guys!

    Anyone tried certificates on Instant after 8.7? It seems that it is now only possible to have one certificate for all authentication, either be it Captive Portal or AdminUI. Captive Portal seem to always just overwrite the certificate added as webUI certificate. This seems to be quite a big change which has slipped under our radar.. Normalt practice for our customers has been to use one cert for their CP (public CA) and another for internal admin (internal CA).

    Anyone able to confirm if this is the case now, or just a bug? Tested in 8.7 and 8.9 with same results.

    Excerpt from documentation says that there can be only one auth server AND cp server cert.. Should've been OR here instead?



    ------------------------------
    John-Egil Solberg |
    ACMX | ACCX
    ------------------------------


  • 2.  RE: IAP certificates after 8.7 - only one for both CP and WUI/adminUI?

    EMPLOYEE
    Posted Oct 13, 2021 09:26 PM
    i think it is correct, one is for the server cert that can be used for Captive portal/HTTPS and the other generally used for authentication, for example in case you want to do EAP-TLS without an external RADIUS server for specific use cases.

    ------------------------------
    Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
    ------------------------------

    Original Message