Wireless Access

Occasional Contributor II

Default TLS certificate issue after switching AOS versions

Hello everyone,


after searching the forums several times without finding something regarding my problem, I guess I need to start a new topic for this:


After switching back and forth between different AOS versions (8.1, 8.0, 6.5 and 6.4) on my lab controllers, I am unable to connect to them using https or ssh after boot. The browser is not showing any certificate for the controllers ip address.

After issuing the command "restore factory_default certificate" https and ssh work again, as long as the controllers are powered on. After next restart I need to execute the command over serial again in order to get https and ssh access to the controllers.

The last thing I tried in order to solve the problem was wiping the flash without any success.


I appreciate any help with the issue



Guru Elite

Re: Default TLS certificate issue after switching AOS versions

We need a screenshot of the errors you are seeing.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.4 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Aruba Central Documentation
Sign up for Security Alerts
Aruba Technical Webinars
Occasional Contributor II

Re: Default TLS certificate issue after switching AOS versions

I feel sorry, as I need to correct myself. I don't know why I was thinking that, but ssh is working in fact. Same with https. It is just not working with Firefox and Edge, but with Chrome. The error message is something like "Can’t connect securely to this page" in all of the browsers, with the exception that Chrome lets me accept that. It seems related to the revocation of the GeoTrust certificate.

What irritates me is, as soon as I execute the restore default certificates command Firefox will let me connect until restart.

But this is clearly an browser/certificate related problem and not AOS related. Shame on me.

Search Airheads
Showing results for 
Search instead for 
Did you mean: