Guest certificate issue.

[Dustin Anderson]

Greetings,

I am working with a new 5520 WLCs to replace our 5508s. I have everything working except am running into an issue with the guest portal.

So, we use a Comodo cert for guest, but it was originally tied to 1.1.1.1, I'm trying to use 10.1.1.1 for the virtual IP on the new controller. I have a new cert from Comodo for this name and it installed fine, but i'm running into users not being able to validate it. The interesting thing is if I load the Comodo cert manually into the intermediate store, then it all works.

Looking at the old and new cert, they both have the same root and intermediate, so i'm unsure why the old works, but the new has issues.

Is there a command so windows can go out and validate the cert? or am I hitting a bug.

5508s running 8.3.143

5520s running 8.7.106 (We have test 4800s so need 8.7+ code)

[Dustin Anderson]

so, I'm not sure why, but I think I found the issue.

In 8.7 there in an option for Captive Network Assistant Bypass that was set to none. I set it to disable and somehow the new cert started to work.

I'm at a loss as this option seems to deal with apple devices, and I was having the issue on a Windows laptop.