topic WLC Certificate Issue in Wireless

WLC Certificate Issue

joeharb — Wed, 27 Jul 2022 13:39:48 GMT

I tried update our expiring WLC certificate and now I can't access the gui period. I can get to the system via ssh. I didn't know if there was simple way to reset the certificate back to the expired on or default one while I investigate the new certificate.

WLC 9800 version 17.06.01

Thanks,

Joe

Re: WLC Certificate Issue

patoberli — Wed, 27 Jul 2022 15:23:24 GMT

What message do you get in the browser if you try to?

Have you tried rebooting the WLC?

Re: WLC Certificate Issue

joeharb — Wed, 27 Jul 2022 15:32:53 GMT

ERR_SSL_PROTOCOL_ERROR is what is displayed in Edge.
I have not rebooted but can do that tonight after business hours.

Re: WLC Certificate Issue

Rasika Nayanajith — Wed, 27 Jul 2022 18:33:05 GMT

Make sure HTTPS uses the trustpoint you created

Administration > Management > HTTP/HTTPS/Netconf and choose the imported certificate from the Trust Points drop-down list.

Then you have to restart HTTPS service using CLI given below

9800(config)#no ip http secure-server
9800(config)#ip http secure-server

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213917-generate-csr-for-third-party-certificate.html#anc26

As a side note, if you plan to reload the WLC, better you upgrade to the 17.6.3 version which is the latest in the 17.6.x code train that you are running.

HTH
Rasika
*** Pls rate all useful responses ***