Wireless Access

last person joined: 11 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

AP can't certified to Controller

This thread has been viewed 4 times

  • 1.  AP can't certified to Controller

    Posted Dec 26, 2019 10:51 PM

    Hi all,

     

    My AP can't join Controller. I have to check whitelist-db and see it's certified-hold-factory-cert and they. I manual change state to certified-factory-cert but it's back again to certified-hold-factory-cert

    My AP is 303, Controller 7210, OS 8.3

    image.png

    image.png

    command change state

    whitelist-db cpsec modify mac-address xx:xx:xx state certified-factory-cert

     



  • 2.  RE: AP can't certified to Controller
    Best Answer

    Posted Dec 28, 2019 12:36 PM

    Do you have auto-cert provisioning enabled?

     

    show control-plane-security

     

    --Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.
    --Problem Solved? Click "Accepted Solution" in a post.

     



  • 3.  RE: AP can't certified to Controller

    Posted Jan 03, 2020 03:25 AM
    @Mr.RFC wrote:

    Do you have auto-cert provisioning enabled?

     

    show control-plane-security

     

    --Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.
    --Problem Solved? Click "Accepted Solution" in a post.

     

    I'm disable control-plane-sercurity and it's ok. but my AP can't join to Controller, so i think this is not my problem. i'm just post new thread, pls help

    https://community.arubanetworks.com/t5/Wireless-Access/AP-can-t-provisioning-with-Switch-Cisco-PoE/td-p/629596

     



  • 4.  RE: AP can't certified to Controller

    EMPLOYEE
    Posted Jan 02, 2020 05:25 PM

    Hi,

     

    The state of a campus AP will be certified-hold-factory-cert when AP is certified with a factory

    certificate but requests to be certified again. Such APs are not
    approved as secure until you manually change the status and verify
    that it is not compromised.

     

    NOTE: If an AP is in this state due to connectivity problems, then the AP
    recovers and leaves this hold state as soon as connectivity is restored.

     

    - Check the connection should not be intermittent between the AP and Controller.

    - Try to factory_rest AP.