WLC Certificate Issue

[joeharb]

I tried update our expiring WLC certificate and now I can't access the gui period.  I can get to the system via ssh.  I didn't know if there was simple way to reset the certificate back to the expired on or default one while I investigate the new certificate.

WLC 9800 version 17.06.01

Thanks,

Joe

[patoberli]

What message do you get in the browser if you try to?

Have you tried rebooting the WLC?

[joeharb]

ERR_SSL_PROTOCOL_ERROR is what is displayed in Edge.
I have not rebooted but can do that tonight after business hours.

[Rasika Nayanajith]

Make sure HTTPS uses the trustpoint you created

Administration > Management > HTTP/HTTPS/Netconf and choose the imported certificate from the Trust Points drop-down list.

Then you have to restart HTTPS service using CLI given below

9800(config)#no ip http secure-server
9800(config)#ip http secure-server

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213917-generate-csr-for-third-party-certificate.html#anc26 

As a side note, if you plan to reload the WLC, better you upgrade to the 17.6.3 version which is the latest in the 17.6.x code train that you are running.

HTH
Rasika
*** Pls rate all useful responses ***