Regenerate Certificate webadmin SSO WLC5508

[albertofdez]

Hi,

For security reasons I need to regenerate the certificate for the https management GUI of a WLC 5508 SSO, since the hash algorithm that has the self-signed certificate of when it is installed is SHA1 and I need it to be SHA256.

I have been able to verify in the laboratory that a WLC 2504 with SHA1 certificate after updating to version 8.5.151.0 and regenerating the certificate in MANAGEMENT -> HTTP-HTTPS -> "Regenerate Certificate" button after restarting the certificate it creates uses SHA256.

This WLC 2504 has no associated APs and I have not been able to verify if the associated APs will be affected by the regeneration of this certificate, do you know if this affects the APs?

Thanks.

[Rasika Nayanajith · Accepted solution]

WLC webadmin certificate should not have any effect on APs. However you have to restart WLC to complete the cert installation process. In your case since it is SSO, you can failover that will trigger the restart of one WLC at a time (so should not have any downtime)

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html 

HTH

Rasika

*** Pls rate all useful responses ***

[albertofdez]

Thank you very much, as you said does not affect the APs at all, you just have to regenerate the certificate and restart