Location of webauth certificate?

[Colin Higgins]

I used the WLC 5508 GUI to generate a CSR for webauth. Went through all the fields and clicked "generate"

However, I don't know where the system put the newly created file or what it called the file? 

Does anyone know where the WLC puts these files, and what it names them?

[d.friday]

Note: The CSR is printed on the terminal after you enter the command. There are no other ways to retrieve it; it is not possible to upload it from the WLC nor is it possible to save it. You must copy/paste it to a file on your computer after you enter the command. The generated key stays on the WLC until the next CSR is generated (the key is thus overwritten). If you ever have to change the WLC hardware later on (RMA), you will not be able to reinstall the same certificate as a new key and CSR will have to be generated on the new WLC.

Take a look at this link it should help you 

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

I Hope this helps

David

[Colin Higgins]

looks like when you do the webauth certificate, it generates a file called final.pem that can be uploaded from the controller

I did that, but now my certificate authority is telling me it is invalid, because it contains the full chain. I have no idea how to proceed from here, and had to contact the TAC

anything to do with certificates and the WLC has always been a nightmare. I don't know why Cisco can't streamline or fix this 

[patoberli · Accepted solution]

If it contains the full chain, open it in a text editor. You should then see two or more CERTIFICATE START sections. One of those (probably the last) is the device certificate request. Simply copy that to a new text file and let your CA sign it.