Yes, you will need to install a certificate on your controller (or Instant), and you need to put the name for that certificate in that field that you highlighted in the screenshot.
Check
these videos on how to setup the Guest workflows with Instant, the certificate is the same with a controller.
If you upload a wildcard certificate, the controller will respond to captiveportal-login.what-your-wildcard.is. *.arubalab.com will be captiveportal-login.arubalab.com. And on the controller, you can check/verify the actual name with the command 'show datapath fqdn'.
The 'default' securelogin.arubanetworks.com is not trusted (self-signed), so can't really be used, and needs to be replaced with your own certificate.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------
Original Message:
Sent: Nov 16, 2021 06:20 AM
From: Ajin Skariah
Subject: Certificate required for Guest Access using Clearpass
Hello,
I have a clearpass with a HTTPS wildcard certificate installed and the main purpose of the clearpass is to provide guest access with self registration as there is a large number of users.
1. Is there any certificate required on Aruba Controller for this setup or it can work with the default certificate?
------------------------------
Ajin Skariah
------------------------------