Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Private key for importing https certificate

This thread has been viewed 18 times

  • 1.  Private key for importing https certificate

    Posted Jul 22, 2021 04:49 PM
    Hi All.
    We are using GoDaddy certificate for https in our clearpass environment. The certificate is getting expired soon and it was auto-renewed by GoDaddy without us sharing the CSR. But we received only the certificate file and not the private key. Please let me know how to get the private key. Also please suggest whether we can use 'Upload Certificate and Use Saved Private Key:' option for import in this scenario.
    Thanks.

    ------------------------------
    Alin Baby
    ------------------------------


  • 2.  RE: Private key for importing https certificate

    Posted Jul 22, 2021 05:36 PM
    Hi Alin

    The certificate was created by GoDaddy using the same CSR that it was created with initially (hence you can use the same private key).

    If you haven't stored the key somewhere (or if you have the encrypted key but not its password), you'll have to generate a new key, a new CSR, and ask for a new certificate.

    ------------------------------
    Miguel Goncalves
    ------------------------------

    Original Message


  • 3.  RE: Private key for importing https certificate

    EMPLOYEE
    Posted Jul 23, 2021 07:51 AM
    Have you tried to use the 'upload and use saved key'? It actually may work.

    Before you do that, export your current certificate from the Certificate Store, and have it password protected so you get the private key with it. You will get a .p12 if I'm correct.

    In case upload with the saved key does not work, you can extract the current private key from the export. OpenSSL will do that, but other methods will work... I just would not use any cloud/internet service for it as they will have access to your private key. Then either create a new .p12 with the existing key and new cert, or create PEM for both the key and the cert and upload those.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message