Cloud Managed Networks

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

Thank you Herman,

That seems rather complicated for a security newbie. Could I onboard my Windows machine with the Onboarding App, then extract from my Windows machine the  file (is it called windows-passpoint-profile?) that needs to be converted thks to a linux system to a p12 ?

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

as it was mentioned before, here is the procedure to use DPP.
Wi-Fi Easy Connect Sensor Onboarding & Backhaul

See if this works for you

Thank you Herman,

That seems rather complicated for a security newbie. Could I onboard my Windows machine with the Onboarding App, then extract from my Windows machine the  file (is it called windows-passpoint-profile?) that needs to be converted thks to a linux system to a p12 ?

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

Thanks. Good to know. However, my sensor is an old one. It is an F5C. In the document, one requirement is to use G5 sensors. Anyway, will try the procedure described by Herman. Cheers.

as it was mentioned before, here is the procedure to use DPP.
Wi-Fi Easy Connect Sensor Onboarding & Backhaul

See if this works for you

Thank you Herman,

That seems rather complicated for a security newbie. Could I onboard my Windows machine with the Onboarding App, then extract from my Windows machine the  file (is it called windows-passpoint-profile?) that needs to be converted thks to a linux system to a p12 ?

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

Hello,

Just to let you know that the suggestion made by Herman worked. I did create from Aruba Central Cloud Auth an android-passpoint-profile using the browser of my Windows PC. Then I tried hard to extract from it the p12 file but my Linux was a TinyCore and nothing worked as it should. So, Herman kindly extracted the p12 and sent it to me. I then configured in the UXI dashboad the Cloud Auth SSID network I want my sensor to test. And it instantly worked like a charm. 

Thanks. Good to know. However, my sensor is an old one. It is an F5C. In the document, one requirement is to use G5 sensors. Anyway, will try the procedure described by Herman. Cheers.

as it was mentioned before, here is the procedure to use DPP.
Wi-Fi Easy Connect Sensor Onboarding & Backhaul

See if this works for you

Thank you Herman,

That seems rather complicated for a security newbie. Could I onboard my Windows machine with the Onboarding App, then extract from my Windows machine the  file (is it called windows-passpoint-profile?) that needs to be converted thks to a linux system to a p12 ?

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks

Thank you Herman,

That seems rather complicated for a security newbie. Could I onboard my Windows machine with the Onboarding App, then extract from my Windows machine the  file (is it called windows-passpoint-profile?) that needs to be converted thks to a linux system to a p12 ?

Olivier,

The official method would be to use DPP to get UXI sensors on the network... One 'workaround' that I've done myself is to request the Android passpoint profile and extract the certificate from there. If you select 'Just use my browser' then under 'More options' pick 'Install on Android' (note just do this on Windows/Mac... no Android needed) and download the file android-passpoint-profile.

Then if you have access to a linux system, you could use the following script/commands to create a .p12 out of it that you can install into UXI Dashboard (without any guarantee that this works, or if it works doesn't break over time):

#!/bin/shif [ -f "$1" ]; then  SRC=$1else  SRC=android-passpoint-profilefiif [ ! -f ${SRC} ]; then  echo "Can't find file ${SRC}"  exitfiTMPBASE="android-passpoint-profile.tmp"if [ ! -f /bin/munpack ]; then  echo "No munpack; to install apt install mpack"  exitfirm -rf tmpmkdir tmpbase64 -d < "${SRC}" > tmp/${TMPBASE}.mimecd tmpmunpack ${TMPBASE}.mimeecho "Just press ENTER on the password prompt"openssl pkcs12 -in part3 -legacy -out ${TMPBASE}.pem -nodesNAME=`cat ${TMPBASE}.pem | grep friendlyName | sed 's/^.* //' | sort -u | head -1`echo "Now enter the export password for the ${NAME}.p12..."openssl pkcs12 -export -in ${TMPBASE}.pem -out ${NAME}.p12 -name "${NAME}"

If it doesn't work out of the box, it's taking the MIME-part 3 from the profile, which has the certificate; extracts that into PEM format, which then is converted into a P12.

Make sure that you delete the PEM files after use as they contain the private key.

Hello,

Have you managed to test a Cloud Auth wifi network with a UXI sensor ? If so, may I ask you how you did it ? Thanks