topic Local EAP with SHA256 certificates in Wireless https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239366#M10610 <P>We are using a third party certification authority (Entrust) and the certificates generated by the CA are SHA256 certificates.&nbsp; I see ACS does not currently support support the SHA 256 certs, but TAC says software versions 7.3x and above on the WLC do support the certs.&nbsp; The certificates also have the Entended Key Usage (EKU) marked as critical.&nbsp; I am using software version 7.4.0.100 on the WLC without success, however SHA1 certificates work fine.&nbsp; Anyone currently using SHA256 certificates with Local-EAP?</P> Sun, 04 Jul 2021 07:22:14 GMT p.dave 2021-07-04T07:22:14Z Local EAP with SHA256 certificates https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239366#M10610 <P>We are using a third party certification authority (Entrust) and the certificates generated by the CA are SHA256 certificates.&nbsp; I see ACS does not currently support support the SHA 256 certs, but TAC says software versions 7.3x and above on the WLC do support the certs.&nbsp; The certificates also have the Entended Key Usage (EKU) marked as critical.&nbsp; I am using software version 7.4.0.100 on the WLC without success, however SHA1 certificates work fine.&nbsp; Anyone currently using SHA256 certificates with Local-EAP?</P> Sun, 04 Jul 2021 07:22:14 GMT https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239366#M10610 p.dave 2021-07-04T07:22:14Z Local EAP with SHA256 certificates https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239367#M10611 <HTML><HEAD></HEAD><BODY><P>I didn't think sha256 was supported.&nbsp; I would ask for the doc that specifies the WLC can use sha256 and custom EKU's which also don't think is supported.</P><P></P><P>Thanks, <BR /> <BR />Scott <BR /> <BR />Help out other by using the rating system and marking answered questions as "Answered"</P></BODY></HTML> Mon, 08 Jul 2013 17:04:53 GMT https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239367#M10611 Scott Fella 2013-07-08T17:04:53Z Local EAP with SHA256 certificates https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239368#M10612 <HTML><HEAD></HEAD><BODY><P>You have the issue with installing the SHA256 cert? or it is installed successfully but it does not work?</P><P>or you are not able to install it?<BR />I remember with earlier codes (7.0) those could not be installed and you can see the message indicating that this cert is not supported if you enable (debug transfer....) during the installation process.</P><P>Try the debug and see what it says. </P><P></P><P></P><P><SPAN style="color: blue;">Rating useful replies is more useful than saying <SPAN style="color: green;"> "<SPAN style="text-decoration: underline;">Thank you</SPAN>"</SPAN></SPAN></P></BODY></HTML> Tue, 09 Jul 2013 08:15:54 GMT https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239368#M10612 Amjad Abdullah 2013-07-09T08:15:54Z Local EAP with SHA256 certificates https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239369#M10613 <HTML><HEAD></HEAD><BODY><P>I have no problem installing the SHA256 certificates.&nbsp; Even with software version 7.0.235.5 on the WLC I can install the vendor CA and device certificate.&nbsp; Once installed the certs show up correctly in the GUI and when I run the sh local-auth certs command.</P></BODY></HTML> Tue, 09 Jul 2013 14:26:29 GMT https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239369#M10613 p.dave 2013-07-09T14:26:29Z Local EAP with SHA256 certificates https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239370#M10614 <HTML><HEAD></HEAD><BODY><P>So you are able to install the cert, but its not working when using local EAP?</P><P></P><P>Thanks, <BR /> <BR />Scott <BR /> <BR />Help out other by using the rating system and marking answered questions as "Answered"</P></BODY></HTML> Wed, 10 Jul 2013 01:10:51 GMT https://community.cisco.com/t5/wireless/local-eap-with-sha256-certificates/m-p/2239370#M10614 Scott Fella 2013-07-10T01:10:51Z