How to Extract CSR from 5508 8.3.133.0

[royce.varughese]

I am trying to generate CSR from WLC for an expired certficate. Any help is appreicated

[balaji.bandi]

Is the Certificate signed by Local CA or External CA ?

If internal CA, you can ask them to generate one for you and update on exiting one.

follow below steps :

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

[royce.varughese]

I was able to generate one following the CLI method, but when we login to WLC which cert is presented is that CSR Auth or CSR Admin.

[Rasika Nayanajith]

For admin pupropse, you have to generate webadmin CSR.

WebAuth is for Guest wireless

Regards

Rasika

[royce.varughese]

I have to do this on a WLC cluster 5508, do I need to generate CSR from both boxes and upload PEM individually?

[balaji.bandi]

yes you are corret

[royce.varughese]

I am unable to generate CSR on standby unit.

(Cisco Controller-Standby) >config certificate generate csr-webadmin xx xx xxx itservices@abc.com

Incorrect usage.  Use the '?' or <TAB> key to list commands.

I don't see more options to generate on standby unit. I am unable to login to peer ip using TACACS login. is this because of no peer route?

[royce.varughese]

Anyone can help? I need to find a way to load the cert on both WLC's.

Is the process that I can use same pem generated with CSR from primary unit on standby as well?

Load the same pem and restart?

[royce.varughese]

hi Rasika, i got the wildcard certificate from customer. But i had a CSR generated by the same time on the primary unit. Now after loading the 3rd party signed cert and reloading , i have lost access on Web to WLC. is this due to the CSR generation and reload without loading the cert/pem generated with that?

How can i recover the WLC now on GUI? Can i go ahead and generate certificate and load the 3rd party cert on to the WLC?

[Sathiyanarayanan Ravindran]

Hi Royce,

Using this command generate a Self signed certificate and reload the WLCs once and see if you are able to get the GUI of it.

This command helps to generate the WLC self-signed certificate.

config certificate generate webadmin

I have faced similar issue and tried, it worked on Chrome but not in Mozila.

Then follow the same procedure suggested by Rasika.