cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Cisco Community Designated VIP Class of 2020

203
Views
0
Helpful
2
Replies
Beginner

Regenerate Certificate webadmin SSO WLC5508

Hi,

 

For security reasons I need to regenerate the certificate for the https management GUI of a WLC 5508 SSO, since the hash algorithm that has the self-signed certificate of when it is installed is SHA1 and I need it to be SHA256.

 

I have been able to verify in the laboratory that a WLC 2504 with SHA1 certificate after updating to version 8.5.151.0 and regenerating the certificate in MANAGEMENT -> HTTP-HTTPS -> "Regenerate Certificate" button after restarting the certificate it creates uses SHA256.

 

This WLC 2504 has no associated APs and I have not been able to verify if the associated APs will be affected by the regeneration of this certificate, do you know if this affects the APs?

 

Thanks.

1 ACCEPTED SOLUTION

Accepted Solutions
VIP Mentor

Re: Regenerate Certificate webadmin SSO WLC5508

WLC webadmin certificate should not have any effect on APs. However you have to restart WLC to complete the cert installation process. In your case since it is SSO, you can failover that will trigger the restart of one WLC at a time (so should not have any downtime)

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html 

 

HTH

Rasika

*** Pls rate all useful responses ***

View solution in original post

2 REPLIES 2
VIP Mentor

Re: Regenerate Certificate webadmin SSO WLC5508

WLC webadmin certificate should not have any effect on APs. However you have to restart WLC to complete the cert installation process. In your case since it is SSO, you can failover that will trigger the restart of one WLC at a time (so should not have any downtime)

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html 

 

HTH

Rasika

*** Pls rate all useful responses ***

View solution in original post

Highlighted
Beginner

Re: Regenerate Certificate webadmin SSO WLC5508

Thank you very much, as you said does not affect the APs at all, you just have to regenerate the certificate and restart
CreatePlease to create content
Content for Community-Ad

August's Community Spotlight Awards