Generate CSR on WLC 5520 running 8.5.151.0

[Tarun1]

Hi,

I am in the process of renewing our web authentication certificate and want to generate a CSR using the WLC. I figured out that the command is

config certificate generate csr-webauth [ISO Country Code] [State/Province] [Locality/City] [Organization Name] [Organization Unit] [Common Name] [Email Address]

The issue is my organization name has multiple words with spaces, say "ABC Sporting Group". How will I go about entering the organization NAME considering there are no commas separating various details required for generating the CSR.

Thank you in advance.

[Scott Fella]

You should generate your csr using OpenSSL or OpenSSL light. There are online tools by certificate authorities that allow you to generate a csr.

[Tarun1]

Hey Scott,

Appreciate that there are other options/alternatives. In fact I used OpenSSL with previous cert renewals. The ability to generate CSR on the WLC is a nice secure and convenient option so I was hoping to make use of this feature.

Lets see if someone else chimes in.

Cheers

[Scott Fella]

Since there is no delimiter available, you will need to use a underscore “_” or hyphen “-“.

[Tarun1]

Thanks Scott but unfortunately its a no go. I get the below when using underscore/hyphen - 

Incorrect input! Use 'config certificate generate csr-webauth country-name state city organization organization-unit common-name support-email RSA/ECDSA'

Cheers

[Scott Fella]

Okay... seems like they built the feature to only support a single word with no symbols.

[Tarun1]

@Scott Fella  Figured out that the command works – organization name can be enclosed within single/double quotes (‘/”) and also specifying the key type (RSA) is mandatory.

For example -

config certificate generate csr-webauth BE BR Brussels 'Cisco Pty Ltd' TAC mywebauthportal.wireless.com tac@cisco.com RSA

or

config certificate generate csr-webauth BE BR Brussels "Cisco Pty Ltd" TAC mywebauthportal.wireless.com tac@cisco.com RSA

Cheers

[Scott Fella]

There you go! Good job at finding the fix!

[Tarun1]

If it is of any help I found that there is a GUI option as well to generate a CSR. Once generated the CSR can be uploaded to a FTP/SFTP repository.

Unfortunately this option did not work for me. When I check the CSR generated this way the organisation name is truncated and also the country code is missing.