Controllerless Networks

Reply
Contributor I

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN

Hello, 

 

I´m having the same issue on instant APS. Failed to make a good presentation to a customer beacuse of this issue who has a demo AP at their office. 

 

How could we solve this in an easy fashion, free of cost and avoiding to install a certificate on each device (which is pretty obvious in a guest wifi) ?

 

Thanks

Guru Elite

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN

Take a look at this: https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Contributor I

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN

Already read it, but found no explanation on how to create a public certificate and i understand it has a cost asociated, is this correct?

 

On the other hand, how can i hand in APs to a client who has no knowledge of certificates? If we should now work on every client for this purpose the time consuming is really big, which doesnt happen on most of the rest of the Wireless companies... 

Guru Elite

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN

It explains how to create a CSR. We can't cover each public certificate provider as they all differ. It's a pretty easy process and is very inexpensive.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Guru Elite

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN


@Tincho.AB wrote:

Already read it, but found no explanation on how to create a public certificate and i understand it has a cost asociated, is this correct?

 

On the other hand, how can i hand in APs to a client who has no knowledge of certificates? If we should now work on every client for this purpose the time consuming is really big, which doesnt happen on most of the rest of the Wireless companies... 


You have two choices:

 

- Upgrade to Instant 6.4.4.8-4.2.4.3 or above and it will automatically generate a self-signed certificate that is not signed by a public authority.  Their users will still get an error, but it will not be revoked.

- Create a CSR using an offline tool (OpenSSL) and submit it to a certificate authority that will give you a public certificate and depending on the certificate, your users will not get any errors.  http://community.arubanetworks.com/t5/Controller-less-WLANs/How-to-Create-a-Certificate-for-Instant-Captive-Portal-using/ta-p/277025    Some certificate authority will allow you to create a personal certificate (www.startssl.com) for non-commercial use and it will be free.  Again, I am not suggesting startssl, but it is one of the CA's out there that offer that service...


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
New Contributor

Re: ArubaOS/IAP Default Certificate Revocation and INTERNAL – ACKNOWLEDGED Guest WLAN

After reading this thread it seems that Aruba is not going to fix this issue and there will be no feature that allows the admin to disable the requirement for a certificate in order to get to the Guest portal disclaimer page.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: