Controllerless Networks

last person joined: 21 hours ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Instant 8.3.0 replace certificates

This thread has been viewed 11 times

  • 1.  Instant 8.3.0 replace certificates

    Posted Sep 18, 2018 02:41 PM

    I'm not able to replace the default Captive Portal certificate in an Aruba Instant environment with 2 AP-303's. The certificate worked succesful in my old AP-103 V6 environment.

     

    The certificate is imported with the GUI, with an succesfull responce. In the CLI system log an error appears: 

    failed to parse cp cert

    After the import, the GUI is unavailable. WLAN clients still can connect and SSH is still possible. After a reboot of the AP's the GUI is working again, but the cp certificate is not available anymore:

    show cert

Default Server Certificate:
Version       :3
Serial Number :B0:AF:C2:6A:09:93:85:18
Issuer        :/C=US/ST=California/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Subject       :/C=US/ST=California/L=Sunnyvale/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Issued On     :Sep  9 04:58:42 2016 GMT
Expires On    :Sep  8 04:58:42 2020 GMT
Signed Using  :SHA256-RSA
RSA Key size  :2048 bits

Error in reading certificate file:
Error in reading certificate file:
Device Certificate:
Version       :3
Serial Number :1D:06:62:3E:00:02:00:49:43:8A
Issuer        :/UID=com/UID=arubanetworks/UID=devicesign/CN=Aruba Networks Trusted Computing Issuing CA 1
Subject       :/CN=CNFVK9T8H0::38:17:c3:c8:83:a4
Issued On     :Apr 25 16:21:58 2018 GMT
Expires On    :Sep 14 03:21:14 2032 GMT
Signed Using  :SHA256-RSA
RSA Key size  :2048 bits

    Also the captive portal is not working anymore. Only way to fix this is a factory reset and a config restore. 

     

    Does anybody know how to fix this?



  • 2.  RE: Instant 8.3.0 replace certificates

    Posted Sep 19, 2018 10:01 AM

    Maybe you are running into the same problem as in this topic :

     

    https://community.arubanetworks.com/t5/Controllerless-Networks/Problems-replacing-certificate/m-p/466026

     

    Double check the procedure of creating the cert file.

     

     

     



  • 3.  RE: Instant 8.3.0 replace certificates

    Posted Sep 21, 2018 05:34 AM

    Hi Toys-toys,


    Double checked the procedure. Created a new CSR and certificate. Unfortunately with the same result. 



  • 4.  RE: Instant 8.3.0 replace certificates

    Posted Oct 03, 2018 03:21 AM

    Today tried to replace the certificates in the CLI. No solution.

     

    AP-303_Slaapkamer# copy tftp 192.168.10.32 arubainstant_sneppie_nl.pem cpserver cert ******** format pem
/bin/sh: 01: not found

System log:
Oct  3 08:59:55  cli[13678]: <341101> <WARN> |AP AP-303_Slaapkamer@192.168.10.41 cli|  Execute command-copy tftp 192.168.10.32 arubainstant_sneppie_nl.pem cpserver cert ************ format pem.
Oct  3 08:59:57  cli[2686]: <341005> <ERRS> |AP AP-303_Slaapkamer@192.168.10.41 cli|  failed to parse cp cert

     Anybody any idea's?