C9800 certificate renewal automation

[jpabisas1]

Hi all,

Is there any functions or tips to renew the SSL certificate on WLC C9800 automatically ?
Currently I'm importing certificate signed by valid CA(GlobalSign) maunally once the year, to prevent browser warning of WebAuth page using for guest WiFi.

Certificate lifespans will shorten to just 47 days by 2029 so I really want to be get ready to automate the renewal process.

I appreciate your assistance and look forward to hearing your thoughts.

[Enes Simnica · Accepted solution]

gDay @jpabisas1 Right now the c9800 doesn’t have a full auto-renew mechanism for WebAuth certificates, so u still have to import a new one manually. The best workaround is to use an external certificate automation workflow, like an ACME client on a certificate server to automatically request/renew the cert, then push it to the WLC via API/RESTCONF or EEM/CLI script on a schedule.

From my experience it’s not fully plug-and-play yet, but scripting the upload is the closest option today, especially as certificate lifetimes get shorter..... If u need more help just ping me.......

hope it helps and PEACE!

-Enes

[jpabisas1]

Hi @Enes Simnica,

Thank you for reply. Will try and share to the community again if it goes well.