topic Yeah couldnot see command to in Wireless

Controller command

Wifi_Eshwar92 — Mon, 05 Jul 2021 14:02:29 GMT

Hi All,

I have enabled this "config ap dtls-wlc-mic SHA1/SHA2" on the controller for this error "*AP has SHA2 MIC certificate - Using SHA2 MIC certificate for DTLS." Now i want to remove that command. How to disable it? will this command affect the aps joining in future or other aps if rebooted ? Thanks!

I dont think you can disable

Sandeep Choudhary — Wed, 17 May 2017 13:22:27 GMT

I dont think you can disable that...

either you need to enable SHA1 or SHA2!!

Regards

Dontf orget to arte helpful posts

Yeah couldnot see command to

Wifi_Eshwar92 — Wed, 17 May 2017 13:26:32 GMT

Yeah couldnot see command to disable it.. Any idea will it affect already joined aps in the event of reboot?

did you configure SHA2 or

Sandeep Choudhary — Wed, 17 May 2017 13:32:39 GMT

did you configure SHA2 or SHA1 on WLC ?

What was earlier configured ?

Regards

Doint forget to rate helpful posts

How to check that.. what all

Wifi_Eshwar92 — Wed, 17 May 2017 13:50:50 GMT

How to check that.. what all certificates need for ap to join.. ?

by the way we have many 1242 models which are pretty old..

ohk then old AP must have

Sandeep Choudhary — Wed, 17 May 2017 13:53:23 GMT

ohk then old AP must have SHA1 certificates.

So if you configure SHA2 on WLC then these old AP will have trouble to join again after reboot.

So better to keep SHA1 on wlc.

Reagrds

Dont forget to rate helpful posts

Thanks for the response..

Wifi_Eshwar92 — Wed, 17 May 2017 14:00:57 GMT

Thanks for the response..

okay.. it sounds like only one certificate will be enabled on the controller? I mean, wont it have all the certificates enabled if we give those command? I have actually given both the commands in order.. SHA1 and then SHA2 as well.. (is there any other certificates aps will come up with- just curious :))

I could also try reboot one ap and test, but it seems like it will take time ...

Hi,

Sandeep Choudhary — Wed, 17 May 2017 14:10:22 GMT

Hi,

As far as I Know: The WLC supports SHA-2 certificates since release 8.0.100, so at this moment this is the only release where this is supported on.

More info:

https://supportforums.cisco.com/blog/13184416/wlc-sha2-cert-support-clarification

Regards

Dont forget to rate helpful posts and also mark it as answered, it may help others

Now running on 8.0.140.0..

Wifi_Eshwar92 — Wed, 17 May 2017 14:19:14 GMT

Now running on 8.0.140.0.. may be i can try rebooting 1 ap and see if any issues.. then revert back to SHA1 if needed.. I will update back here,,

Many thanks for your time