topic Re: How to renew Cisco NAC Guest server ssl certificate in Network Security

Cisco NAC Guest server ssl certificate

MikeFulstow — Fri, 21 Feb 2020 12:20:07 GMT

I've just tried to install an SSL certificate from our internal issuing CA to overcome the certificate error when browsing to the NAC guest server. I can no longer browse to the NAC Guest server as there is a reported mismatch in the private key. Can someone please tell me how I can either replace the new certificate with the old one if it is backed up, using the CLI? Alternatively does anyone know how to generate a new localhost cert from the CLI?

Thanks in advance for your help,

Mike.

Cisco NAC Guest server ssl certificate

rgreville666 — Tue, 12 Jul 2011 11:06:48 GMT

To uplaod a private key follow this...

http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/20/g_setup.html#wp1095977

If the private key and Cert don't match you will get numerous issues with the DB, I suggest disabling replication before doing any work relating to PKI.

Grev

Cisco NAC Guest server ssl certificate

MikeFulstow — Tue, 12 Jul 2011 22:32:32 GMT

Hi Grev,

Thanks for this. I ended up raising a TAC case and they directed me to this link. After getting the various cert locations and importing the cert it works fine from either CLI or GUI. If absolutely necessary you can use the openssl toolset to re-generage CSR but it's generally best to backup the original web server SSL cert before you start!

Thanks for the reply,

Mike.

Re: How to renew Cisco NAC Guest server ssl certificate

Vinay-M. — Thu, 17 Jan 2019 14:25:35 GMT

Hi,

Could you guide me on how to renew existing SSL certificate on Cisco NGS.

Please confirm if following setps are correct

From the administration interface, select Server > SSL Setting

Create CSR

Download CSR

Upload new Certificate issue by CA team

Reboot server