topic Re: Does Mobility Express Support Custom Certificates? in Wireless

Does Mobility Express Support Custom Certificates?

12798172938724295 — Mon, 05 Jul 2021 17:02:08 GMT

I have a Mobility Express deployment but the web portal for managing the controller is self-signed and thus untrusted. Is it possible to upload a valid certificate to the Mobility Express controller in order to securely manage it?

Re: Does Mobility Express Support Custom Certificates?

Haydn Andrews — Tue, 12 Mar 2019 03:23:18 GMT

From the Mobility Express Deployment guide:

The Mobility Express controller uses a self-signed certificate for HTTPs. Therefore, all browsers display a warning message and asks whether you wish to proceed with an exception or not when the certificate is presented to the browser. Accept the risk and proceed to access the Mobility Express Wireless LAN Controller login page.

There is nothing in the deployment guide advising if it is possible to deploy a signed certificate for HTTPS management.

This is just for management of the device so wont be an issue for clients.

Re: Does Mobility Express Support Custom Certificates?

victorkostin — Mon, 11 Nov 2019 04:12:27 GMT

You can install a custom certificate to Mobility Express controller from CLI like on other versions of WLC.

Here an how-to: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

You can create a CSR request from Mobility Express CLI, but it can't create CSR with a subject alternative name (SAN), and in Google Chrome after 58 versions this certificate will be invalid. So a preferred way would be like this:

Step 1 option A

Step 2 option A or B

Step 3 CLI