cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1014
Views
0
Helpful
1
Replies

CSR Generation for cisco WLC

abinaya.2.r
Level 1
Level 1

Hi,

I have anchor WLCs at different locations and I see the guest users facing an SSL certificate error message.

I am now going to generate the CSR through OpenSSL and get it signed from a third part CA authority and install it on the WLC.

I have the below anchor WLC model and verion

 

Cisco AIR-CT5508-K9- 7.4.121.0

Cisco AIR-CT5508-K9 - 8.0.152.0

Cisco AIR-CT3504-K9 - 8.5.131.0

In few cisco forms i see to use openssl version 0.9.8 and also openssl 1.1 and few forums for the WLC above 8.5 series, to generate the CSR from the WLC itself with condition, "if you run the csr generation command and do not install the resulting certificate yet, your WLC will be completely unreachable on HTTPS at the next reboot, as the WLC will use the newly generated CSR key after reboot but does not have the certificate that goes with it."

Considering the above  condition, I am avoiding to the certificate generation through WLC and will get it done through openSSL.

 

Can you confirm if i can use 0.9.8 for all the WLC version that i mentioned above?

1 Reply 1

abinaya.2.r
Level 1
Level 1

I need to generate CSR using the below requirement. Can you help with the procedure.

Signature algorithm : SHA256 | Key Algorithm : RSA | Key size : 2048

Review Cisco Networking products for a $25 gift card