WLC config analyzer - AP Aprox Cert Expiration

[Finn Rud Laursen]

Hi All,
I just notice the config analyzer show AP certificate expiration date.

I have some older 1131 expiring starting in July.  Why is this?

Model	Admin Status	Serial	Aprox Cert Expiration
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0CX	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0D2	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0BG	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0BR	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0BK	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0932Q0BH	2015 August
AIR-LAP1131AG-E-K9	Enabled	FCZ0951Q0RL	2015 December
AIR-LAP1131AG-E-K9	Enabled	FCZ0931Q0ED	2015 July
AIR-LAP1131AG-E-K9	Enabled	FCZ0931Q0EH	2015 July
AIR-LAP1131AG-E-K9	Enabled	FCZ0931Q0EE	2015 July
AIR-LAP1131AG-E-K9	Enabled	FCZ0948Q11D	2015 November
AIR-LAP1131AG-E-K9	Enabled	FCZ0948Q112	2015 November
AIR-LAP1131AG-E-K9	Enabled	FCZ0948Q10Z	2015 November
AIR-LAP1131AG-E-K9	Enabled	FCZ0948Q10B	2015 November
AIR-LAP1131AG-E-K9	Enabled	FCZ0948Q0JJ	2015 November

[Leo Laohoo · Accepted solution]

The answer to your question can be found HERE and if you have controller-based AP, then read THIS.

[Finn Rud Laursen]

Hi Loe,
Thanks for the quick reply. 

Solution:

To allow additional usage of hardware, beyond the 10 year certificate date, Cisco is providing a software maintenance release with a feature to ignore the validity period of the certificates in the CAPWAP authentication process.

Maintenance releases with the feature to ignore the validity period of the certificates are being created for AireOS 7.0, 7.4 and 8.0 and expected to be on www.cisco.com by the end of April for 7.0 and 7.4, and by the end of June 2015 for 8.0.

* what about Maintenance releases for 7.6.x.x? any plans?

/Finn

[Leo Laohoo]

It should be.  As long as the command is available.