Transferring Files To And From A Controller; Downloading Device Certificates - Cisco 2100 Series Configuration Manual

Chapter 9 Managing Controller Software and Configurations
Note

Transferring Files to and from a Controller

Controllers have built-in utilities for uploading and downloading various files. Follow the instructions
in these sections to import files using either the controller GUI or CLI:
•
•
•
•

Downloading Device Certificates

Each wireless device (controller, access point, and client) has its own device certificate. For example,
the controller is shipped with a Cisco-installed device certificate. This certificate is used by EAP-FAST
(when not using PACs), EAP-TLS, PEAP-GTC, and PEAP-MSCHAPv2 to authenticate wireless clients
during local EAP authentication. However, if you wish to use your own vendor-specific device
certificate, it must be downloaded to the controller.
See the
Note
Follow the instructions in this section to download a vendor-specific device certificate to the controller
through the GUI or CLI. However, before you begin, make sure you have a TFTP or FTP server available
for the certificate download. Keep these guidelines in mind when setting up a TFTP or FTP server:
•
•
•
Note All certificates downloaded to the controller must be in PEM format.
OL-17037-01
If you do not install the 5.2.157.0 ER.aes file, the Field Recovery Image Version field shows
"N/A."
Downloading Device Certificates, page 9-13
Downloading CA Certificates, page 9-16
Uploading PACs, page 9-19
Uploading and Downloading Configuration Files, page 9-21
"Configuring Local EAP" section on page 5-38
If you are downloading through the service port, the TFTP or FTP server must be on the same subnet
as the service port because the service port is not routable, or you must create static routes on the
controller.
If you are downloading through the distribution system network port, the TFTP or FTP server can
be on the same or a different subnet because the distribution system port is routable.
A third-party TFTP or FTP server cannot run on the same computer as WCS because the WCS
built-in TFTP or FTP server and the third-party TFTP or FTP server require the same
communication port.
Transferring Files to and from a Controller
for information on configuring local EAP.
Cisco Wireless LAN Controller Configuration Guide
9-13