Security

what are the steps to renew the self signed SSL cert for clearpass?

during a recent VAPT scanning, we found that the following

SSL Certificate Cannot Be Trusted. Recommend to purchase or generate a proper certificate for the ClearPass appliance.

you should always get a proper publically signed HTTPS Server certificate for clearpass.

------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------

There are multiple certificates in ClearPass, and these have different recommendations and properties.

To make sure you do the right thing, and don't break connectivity when renewing/replacing the certificate, it may be best to work with your Aruba Partner.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------