Generate new CSR on WLC

[Jean Paul Enerst]

Hi Gents,

It has come to my attention that our cert for guest web auth. has expired; therefore, i need to generate a new cert. Last time i did that i used oppenssl which was a bit messy. Now, i was going trough the note to regenerate a new CSR and found that found that 8.3.x can generate CSR from the WLC. 

I have generated CSR through Cisco device before(ASA for instance), before i upgrade the WLC to 8.3. Currently running one version below 8.2.x. I'd like to know, once the CSR has been signed by our third party CSR is there anything else needs to be done, beside just upload the newly cert-received from the CR?

Thanks,

[patoberli]

That depends in what format the signed certificate is. If you're lucky, you don't have to do anything, if you aren't you have to add the root and intermediate into the certificate.
Here the details: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

[ajc]

I have a written procedure using OpenSSL quite simple which I have used on 8510,5508, 8540, 2500 WLC's. If you are interested send me a note.