Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

certificate expire

This thread has been viewed 73 times
  • 1.  certificate expire

    Posted Jan 06, 2020 09:39 AM
      |   view attached

    Hello

    If I look under Maintenance - Certificates I see that some of the certificates expire in september 2020. (see attachment)

    Does it renews automatically? What if it expires? How can I renew this?

    I have a mix of IAP-105 and IAP-205 and IAP-207 devices.

    Thanks.

     



  • 2.  RE: certificate expire
    Best Answer

    MVP EXPERT
    Posted Jan 06, 2020 09:46 AM

    The certificates do not renew automatically. Best practice is to replace these certificates with your own as the certificates shipped with IAPs are used for demonstration purposes. The certificates may have been updated in later firmware versions however you should still replace these with your own certificates. In the past, the shipped certificates have been revoked.

     

    https://www.arubanetworks.com/techdocs/Instant_83_WebHelp/Content/Instant_UG/Authentication/Certificates.htm

     

    https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814



  • 3.  RE: certificate expire

    Posted Jan 06, 2020 10:01 AM

    Thanks for the reply. The whole certificate-thing is new to me. Can I for example just go to the website www.ssls.com and buy the PositiveSSL certificate? Then I just upload it? Does it require any other configuration? 1 certificate for all my IAP's together?

    If I look under the certificates on my IAP, there is the 'default server certificate', the 'default cp server certificate' and the 'default web UI server certificate'. Will the 1 purchased certificate be fine for all of those?

    Thanks.



  • 4.  RE: certificate expire

    MVP EXPERT
    Posted Jan 06, 2020 10:06 AM

    Take a look at the link previously provided, this will guide you.

     

    https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814

     

    You can purchase one certificate for all or you can have a separate certificate for each function you are using (e.g Web UI, captive portal and EAP-Termination). It all depends on how the certificates are being used within your environment. Any certificates you upload will be distributed to all IAPs in that cluster.

     

    Ensure, that your new cert is in .pem format as this will allow for it to be uploaded.