01-21-2024 04:40 PM
on the 5500 HA SSO, we need to update the active wlc, perform a redundancy force-switchover, then update the sec wlc certificate.
i was told 5500 wlc need to be reboot for new cert to take effect.
Come to C9800 HA-SSO, does it need a reboot as well? also need to apply to active and force a failover and reapply like 5500 wlc??
search online cannot find any info on this.
thanks.
Solved! Go to Solution.
01-24-2024 02:15 PM - edited 01-24-2024 02:15 PM
@RoadRunner4k has already provided the correct link with full details but addressing your specific questions:
i was told 5500 wlc need to be reboot for new cert to take effect.
Correct
Come to C9800 HA-SSO, does it need a reboot as well?
No but if your read the instructions at that link you'll see you need to restart the https server:
9800(config)#no ip http secure-server
9800(config)#ip http secure-server
also need to apply to active and force a failover and reapply like 5500 wlc??
Also answered at that link: "On a 9800 pair configured for Stateful Switchover High Availability (HA SSO), all certificates are replicated from the primary to the secondary ..." so no need for switchover.
01-21-2024 11:25 PM - edited 01-21-2024 11:51 PM
On the C9800 it doesn't require a reboot as on the 5500 series.
Generate and Download CSR Certificates on Catalyst 9800 WLCs - Cisco
01-24-2024 02:15 PM - edited 01-24-2024 02:15 PM
@RoadRunner4k has already provided the correct link with full details but addressing your specific questions:
i was told 5500 wlc need to be reboot for new cert to take effect.
Correct
Come to C9800 HA-SSO, does it need a reboot as well?
No but if your read the instructions at that link you'll see you need to restart the https server:
9800(config)#no ip http secure-server
9800(config)#ip http secure-server
also need to apply to active and force a failover and reapply like 5500 wlc??
Also answered at that link: "On a 9800 pair configured for Stateful Switchover High Availability (HA SSO), all certificates are replicated from the primary to the secondary ..." so no need for switchover.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide