Wireless Access

I am looking at the tree and it seems that I can generate a CSR at different levels. Should I generate CSR in each hardware level (I have 6 hardware -- 2x MM and 4x MC). Or should I create CSR at the MM (Mobiility Master) and MN (Managed Network) levels only.

What is the best practice?

You should create a CSR offline.  If you create a CSR on a controller, the resulting certificate will be bound to that controller.  If you create the CSR offline and obtain the certificate, you would be able to import the certificate and then propagate it to other MDs.  I am assuming this is for captive portal..../

---

@cjoseph wrote:

You should create a CSR offline.  If you create a CSR on a controller, the resulting certificate will be bound to that controller.  If you create the CSR offline and obtain the certificate, you would be able to import the certificate and then propagate it to other MDs.  I am assuming this is for captive portal..../

---

How does one go about creating a CSR offline?