Security

 View Only

  • 1.  ClearPass 6.11.5 RADIUS/EAP Cert. Can you export your Private Key for safe keeping.

    Posted Dec 05, 2023 10:45 AM

    Hello Community.

    The RADIUS/EAP Certificate on my ClearPass cluster will expire in approximately one month.

    I have renewed the same certificate for another 13 months. A process that uses the same CSR.

    As the private key for this certificate is stored on the Publisher where the CSR was originally created about a year ago. I am concerned that it may no longer be available when I try to import the new copy of the certificate in a few weeks.  

    When I created the CSR, I do not recall that downloading a copy of the private key on its own as an option. I only downloaded the CSR.

    Is it possible to somehow get or ask TAC to get a copy of the private key?

    Thanks in advance.



  • 2.  RE: ClearPass 6.11.5 RADIUS/EAP Cert. Can you export your Private Key for safe keeping.
    Best Answer

    Posted Dec 05, 2023 10:52 AM

    If this is about the installed certificate and it's private key, the answer is yes. Go to the certificate, and select Export, then make sure that you enter a password/passphrase because without that you will not get the private key. With some openssl tools, you can extract the key.

    If you need the key that belongs to the generated CSR, you can download it after you installed the certificate.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: ClearPass 6.11.5 RADIUS/EAP Cert. Can you export your Private Key for safe keeping.

    Posted Dec 05, 2023 11:17 AM

    Thank You Herman, that was actually pretty easy.

    I have a copy of the private key now.


    Original Message


Related Content