Wireless Access

 View Only
  • 1.  ClearPass Certificate Backup

    Posted Dec 16, 2025 09:32 AM

    I'm getting ready to rebuild my ClearPass cluster (4 server) and want to export my certificates as a backup. I'm getting mixed information. It seems that I should be able to login to the Publisher, go to Administration > Certificates > Certificate Store and by manipulating the "Select Server" and "Select Usage" fields, export each certificate for each server.

    However, some instructions say that I need to login to each individual server and export the certificates for that server.

    Can I export all certificates while logged into the Publisher or do I need to login to each one?

    Thank you,



    -------------------------------------------


  • 2.  RE: ClearPass Certificate Backup
    Best Answer

    Posted Dec 16, 2025 09:58 AM

    You can export all of the certificates while using the UI pointed at the publisher, but will need to go through the various servers in order to get all of the certificates if you have used a unique certificate per node.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: ClearPass Certificate Backup

    Posted Dec 28, 2025 06:44 PM

    As Chulcher already mentioned you can export your https, radius-server certificates by exporting them from the publisher aslong this are the same certificates used on the other nodes.

    To add some extras:

    • when export put a password to create a pkcs12 including the private key, whiteout password the private key is not exported.
    • also export your root-ca and intermediate certificates form the trust store if needed.

    You can import the the radius-server and https certificates on a new server by importing the pkcs12 if this are including the private keys.



    ------------------------------
    Marcel Koedijk | MVP Expert 2024 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------