Security

I have a CPPM where the HTTPS certificate is still valid for the next year, but the RADIUS cert is about to expire. This device is only used for guest users connecting from Instants and Controllers. Will this expired cert cause an issue or is it only the HTTPS certificate expiring that will give the users an error?

If the cert expires the radius service will stop processing requests. You can just issue a self signed cert and install it on the radius.

I have iinstalled a self-signed cert which worked fine, although there was a delay in reporting that the new one was installed and was not due to expire. This was cleared after the clean-up interval.

Thanks for all the help.

When the HTTPS certificate expires, users will receive an error when browsing to the URL. The HTTPS certificate will not impact authentication in any way. 

The RADIUS certificate is only used in EAP authentication transactions, not for captive portal which typically uses PAP or CHAP for the authentication.

 

Good catch by Troy on the RADIUS server terminating. Putting the same certificate as you have for HTTPS as your RADIUS certificate may solve that as well, if you don't feel comfortable putting a self-signed cert as your RADIUS cert.