Wireless Access

Hello,

I am trying to establish an IF-MAP connection between a 7010 controller and a ClearPass using self signed certificates.

The IF-MAP stays down and the message we can see at the controller is the one below:

192.168.254.9:443 DOWN [04/07/20 15:04:20] SSL certificate problem: self signed certificate

7010 is running OS 8.6.0.3 as a device managed by a Mobility Master VA

ClearPass is the CLAVB 6.9.0.130064

What would be the solution using the self signed certificate issued by the ClearPass?

Thank you

It is not recommended to run ClearPass with self-signed certificates, so the recommendation is to get a proper certificate and install that. If you don't need external client trust, you could use an internal/private CA to generate the ClearPass HTTPS certificate. If you don't have a private CA, you may leverage the Onboard CA for that.

You may try if it works to import the ClearPass self-signed certificate in the controller as Trusted CA, but haven't tried that.

This is the point where I am facing the problem. When I try to import the Clearpass certificate as a trusted CA, the error below pops-up:

Certificate does not have the basicConstraints extension CA flag set.

I can only import it as a server certificate.