topic Question regarding accesspoint certificates in Wireless

Question regarding accesspoint certificates

jino_jacob — Sun, 04 Jul 2021 04:26:03 GMT

Hi All,

I have a 5508 WLC with 5 1142N accesspoints in one of our branch sites currently running on code 7.0.98.218.

I need to setup NTP server on the WLC and read somewhere that if the AP certificates validity date/time doesnot fall within in the WLC date/Time then APs would not join the WLC.

I am unable to check the certificate date on the AP CLI as it does not accept the command "Show crypto ca certificates"

1). How do I check the AP certificate validity time?

2). Also is there any chance of wireless service disruption while configuring the NTP server as the date on the controller is one month behind the actual date.

Thanks for any help you could provide.

Jean

Re: Question regarding accesspoint certificates

Stephen Rodriguez — Mon, 23 Jan 2012 19:26:25 GMT

there should be no service interruption for setting NTP. You would only see the log time and date change.

As for the AP the cert should be food I'll at least 2028. I'll see if I can't find a command that will show the valid dates for you.

Steve

Sent from Cisco Technical Support iPhone App

Re: Question regarding accesspoint certificates

daviwatk — Mon, 23 Jan 2012 19:42:23 GMT

From the WLC CLI, you can perform the following debugs to examine certificate information being passed to the WLC from the AP in question during the join process.

> debug mac addr

> debug pm pki enable

You will be able to see all relevant information about the APs certificate at the WLC; validity period included.