Network Management

 View Only

  • 1.  How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 05:07 AM

    Hello, 

    In my Aruba HP 2530-8G-PoEP Switch (J9774A), I see ton of  "EST enrollment with server failed because of CACERTS curl error." 

    I dont want to use aruba central,

    HP-2530-8G-PoEP# sh aruba-central

 Configuration and Status - Aruba Central

  Server URL              : None
  Connected               : No
  Mode                    : NA
  Last Disconnect Time    : NA
  Server DNS Lookup       : NA
  Proxy Server DNS Lookup : NA
  Error Reason            : NA

    Primary Software    YA.16.10.0009 

    ROM    YA.15.20

    Any thoughts on how to stop this being logged?

    Thanks.



    -------------------------------------------


  • 2.  RE: How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 05:51 AM

    Hello,

    This warning comes from the Aruba Activate/EST (certificate acquisition for Zero-Touch Provisioning) trial in the background, not from management via Aruba Central. When the 2530 connects to the internet, it attempts to reach Activate and acquire a device certificate via EST; if the time/DNS/CA chain is not correct, a "CACERTS curl" error occurs. If you are not using Central, you can completely disable this process and silence the log.

    Enter the following commands in config mode:
    conf t
    aruba-central disable
    activate provision disable
    activate software-update disable
    write memory

    aruba-central disable Disables the connection to Central.
    activate provision disable and activate software-update disable stop ZTP/certificate and software control via Activate.

    -------------------------------------------



  • 3.  RE: How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 06:08 AM
    Hi, to disable use the command aruba-central disable once in Switch config mode.

    Have you tried to upgrade to latest ArubaOS-Switch 16.11 software line? the latest software build for your HPE Aruba 2530 should be the YA.16.11.0027, the YA.16.10.0009 is quite old.





  • 4.  RE: How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 10:43 AM
    Edited by simtcr Sep 13, 2025 10:50 AM

    @DP-7f7ca3 @MD-6e8f66

    I ran, 

    HP-2530-8G-PoEP# confi
HP-2530-8G-PoEP(config)# aruba-central disable
HP-2530-8G-PoEP(config)# activate provision disable
HP-2530-8G-PoEP(config)# activate software-update disable
HP-2530-8G-PoEP(config)# write memory
HP-2530-8G-PoEP(config)# exit
HP-2530-8G-PoEP# write memory
HP-2530-8G-PoEP#

    But still I see,

    I do not have a corporate email address to register, which I understand is needed to download latest firmware.

    -------------------------------------------

    Original Message


  • 5.  RE: How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 10:59 AM

    Sorry I think I replied too soon.

    Its been 15mnts and no new messages.

    -------------------------------------------

    Original Message


  • 6.  RE: How to fix "EST enrollment with server failed because of CACERTS curl error." on Aruba HP 2530-8G-PoEP Switch (J9774A) ?

    Posted Sep 13, 2025 02:21 PM

    Hello @simtcr,

    I'm glad the problem is fixed.
     
    Take care of yourself.
    -------------------------------------------

    Original Message


Related Content