topic Re: Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller in Wireless

Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller

zstamm — Thu, 06 Mar 2025 14:43:20 GMT

I am planning on regenerating self signed CA certs for a C9800-CL-K9 wireless controller. The self signed CA is working right now, but the CA cert is expiring soon, so it is unable to renew certs. The current plan is to just regenerate the certs. I saw this document on how to set this up, but it doesn't state the details on regenerating the certs.

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-16/config-guide/b_wl_17_16_cg/m_controller-self-signed-certificate.html

I am planning on running the following commands:
crypto key generate rsa general-keys modulus 2048 label WLC_CA
crypto key generate rsa exportable general-keys modulus 2048 label ewlc-tp1

Is this all that I need to do to regenerate the certs?

Re: Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller

Scott Fella — Thu, 06 Mar 2025 14:49:52 GMT

If that is what you want to do, that guide has all the commands you need to use in order to generate a new certificate and trustpoint.

Re: Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller

zstamm — Thu, 06 Mar 2025 16:38:28 GMT

But do I need to make a new trustpoint if all I want to do is regenerate the expiring certs?

Re: Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller

Scott Fella — Thu, 06 Mar 2025 16:56:34 GMT

If the cert is not being used, then you don't. Now, I don't know what cert you have defined to be used for what, but its pretty simple to generate a new cert and trustpoint using the guide and or the GUI.

Re: Regenerate Self-Signed CA Certs on C9800-CL-K9 Wireless Controller

Rich R — Mon, 10 Mar 2025 02:01:07 GMT

This is also covered in the Best Practices guide:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-best-practices.html#Configurationfilemanagement
Also see:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/technical-reference/c9800-cl-dg.html#Configuringthe9800CLviatheCLISkippingtheDAY0guidedflow
and
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/9800-cloud/installation/b-c9800-cl-install-guide/booting_the_controller_and_accessing_the_console.html