4500 Wireless Controller and 3600 Series APs - Expired Certificates

[MattP118]

Hi all, 

I have a client with some older Cisco hardware and the certificates stored in their 3600 series APs have recently expired. I'm bypassing the authentication on that front for now so that the network stays up, but I'm looking for a better long-term solution that hopefully doesn't involve purchasing new hardware. I saw on another forum that upgrading the firmware can force the certificates to renew, but I've had very little luck figuring out how to do that. All I can find as far as a manual goes for these APs is a "getting started guide" that doesn't really include any info on managing these devices once they're deployed. Any help you can offer would be appreciated.

Thanks, 

Matt

[Leo Laohoo]

A 4500 WLC?  
Is this a Sup8/Sup9?

[Rich R]

The field notice about certs is at https://www.cisco.com/c/en/us/support/docs/field-notices/639/fn63942.html

3600 APs are end of support: https://www.cisco.com/c/en/us/products/collateral/wireless/aironet-3600-series/eos-eol-notice-c51-737511.html

Converged access - the short-lived WLC on switch solution you appear to be using - is end of life as Cisco abandoned it.  Now superseded by the 9800 series controllers.

Upgrading firmware does not replace the MIC certificate.

Your only option is new hardware because pretty much everything you're using is close to or already past end of support.