Wireless Access

 View Only

  • 1.  Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 12:11 PM

    Hi there 
    I am trying to create an internal certificate (just used within our network) on our Aruba mobility controllers. I believe it doesnt need a signing authority
    since it only using within our network. Can someone provide that information for me? Thank You and Happy New Year.



  • 2.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:05 PM

    What do you want to use the certificate for?



    ------------------------------
    Marcel Koedijk | MVP Expert 2023 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------

    Original Message


  • 3.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:11 PM

    just to use the web interface (gui) for admin logins to the mobility master and controllers. To get rid of the annoying not secure when admins
    try to access it via https


    Original Message


  • 4.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:17 PM

    Then you need the controller server certificate to be issued by public or a trusted CA otherwise you get that warning.

    you upload the certificate from here.

    and then you assign it to be the certificate for the web-server accessing the controller from here.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 5.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:56 PM

    Thank You so much. What about an Aruba 6300m switch?


    Original Message


  • 6.  RE: Internal certificate for an Aruba 7210 controller

    Posted Feb 19, 2025 02:24 AM

    What step would I be missing if my cert is not listed in the drop-down menu on the Web Server Configuration page?


    Original Message


  • 7.  RE: Internal certificate for an Aruba 7210 controller

    Posted Feb 19, 2025 02:27 AM

    Then you probably did not import the certificate (plus private key) as type ServerCert. Or if you have a Mobility Conductor, the ServerCert may be imported at a lower level in the hierarchy.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 8.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:53 PM
    Edited by mkk Jan 09, 2024 05:54 PM

    You need first to reach your mobility master based on a DNS entry.

    Then you need to deploy a server certificate that is issued by a intermediate/root CA that is trusted by your browser.

    The Common Name (CN) must equal your FQDN

    This could by a certificate issued by your own PKI or buy a public certificate.

    If you like a server certificate on your Mobility Master as well your MD controllers you can use a wildcard or multidomain certificate with SANs.

    I would recommend to create your Certificate Signing Request (CRS) on another device with OpenSSL, so you can save the private key in a safe place. Certificates on a WLAN controller cannot be exported.



    ------------------------------
    Marcel Koedijk | MVP Expert 2023 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opinions are my own
    ------------------------------

    Original Message


  • 9.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 05:59 PM

    Thanks Marcel. What about an Aruba 6300m switch? Its just for the https web/gui interface for domain admin logins


    Original Message


  • 10.  RE: Internal certificate for an Aruba 7210 controller

    Posted Jan 09, 2024 07:00 PM
    Edited by mkk Jan 10, 2024 06:27 AM

    Have to check that when have some time.



Related Content