Cloud Managed Networks

 View Only
  • 1.  Change WPA3-Personal password with Aruba Central API

    Posted Aug 02, 2025 07:57 AM

    Hi all,

    I have currently a Powershell script that changes the WPA2-Personal password for a certain WLAN, all working fine.
    Now I want to enable 6GHz on that WLAN but I would need to use WPA3-Personal, no problem.
    The only issue is, the current API I use only supports WPA2. (/configuration/v2/wlan/{group_name_or_guid_or_serial_number}/{wlan_name}).
    In the swagger in Aruba Central I can't find a API that allows to change the WPA3 password.
    The only thing I could find was /configuration/full_wlan/{group_name_or_guid_or_serial_number}/{wlan_name}

    But the issue with that API is that it has a single value of the full configuration.
    Is there another API that I missed or am I just out of luck?

    Kind regards,

    Mitchel



    -------------------------------------------


  • 2.  RE: Change WPA3-Personal password with Aruba Central API

    Posted Aug 04, 2025 07:34 AM

    AFAIK, the WPA3 PSK is stored in the same attribute wpa_passphrase:

        "wpa_passphrase": "1234567890",
        "wpa_passphrase_changed": true,
    

    Just the opmode is different (wpa3-aes-sae).

    So if you can change the passphrase on WPA2-PSK, it should be the same for WPA3-AES-SAE.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Change WPA3-Personal password with Aruba Central API

    Posted Aug 04, 2025 09:01 AM

    Hi Herman,

    I thought the same, but unfortunately I receive the following error:

      "description": "Key Management wpa2-psk-aes is not allowed for 6GHz radio, only enhanced-open,wpa3-sae-aes,wpa3-cnsa,wpa3-aes-ccm-128,wpa3-aes-gcm-256 support ",
      "error_code": "0001",
      "service_name": "Configuration"

     I'm PUTing the following body:

    "wlan" = @{
            "essid" = $ssidName
            "type" = "employee"
            "wpa_passphrase" = $newPassword
            "wpa_passphrase_changed" = $true
            "access_rules" = @(
                @{
                    "action" = "allow"
                    "eport" = "any"
                    "ipaddr" = "any"
                    "match" = "match"
                    "protocol" = "any"
                    "service_name" = ""
                    "service_type" = "network"
                    "sport" = "any"
                    "throttle_downstream" = ""
                    "throttle_upstream" = ""
                }
            )
        }


    As you can see, the WLAN was already set on wpa3-sae-aes

    -------------------------------------------



  • 4.  RE: Change WPA3-Personal password with Aruba Central API
    Best Answer

    Posted Aug 04, 2025 11:47 AM

    I see the same; but was able to make it work with the full_config API:

    Get the current full configuration: GET /configuration/full_wlan/{group_name_or_guid_or_serial_number}/{wlan_name}

    Replace:

    \"wpa_passphrase\": \"**************\",

    by:

    \"wpa_passphrase\": \"my-new-secret-password\", \"wpa_passphrase_changed\": true,

    Upload the full config again via PUT /configuration/full_wlan/{group_name_or_guid_or_serial_number}/{wlan_name}

    In code, you may replace('************",','my-new-secret-password\", \"wpa_passphrase_changed\": true,').



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 5.  RE: Change WPA3-Personal password with Aruba Central API

    Posted Aug 05, 2025 04:51 AM
    Edited by Mitchel N Aug 05, 2025 05:01 AM

    Ah I see, I was afraid of that, I'm not a hero with PowerShell and the find and replace did not work as good.
    I hoped there was another API, that was just as easy as the /configuration/v2/wlan

    Anyways, thank you for you reply.



    ------------------------------
    With kind regards,

    Mitchel Nijkamp
    ------------------------------