Ruckus Wireless ZoneDirector 1100 User Manual page 382

Working with SSL Certificates
SSL Certificate Advanced Options
• Generate a new private key with a specified key length (either 1024 or 2048 bits).
Use this option if your previous private key has been compromised or you need
to use a stronger key.
Note that a new certificate must be generated and installed afterwards.
Figure 201. SSL Certificate Advanced Options
Wildcard Certificate Installation
A wildcard certificate is a generic certificate that can be used for devices in a specific
domain. This is useful for Smart Redundancy installations where you have two
ZoneDirectors. You can purchase and install two certificates, or use a wildcard
certificate.
When you try to import a wildcard certificate, the ZoneDirector will notify you that it
does not have the matching private key. At this point, click on the "click here" link
to import the private key. Once the private key is imported, try to import the certificate
again. The ZoneDirector will prompt you for the host name. Enter the hostname and
ensure that your DNS server is configured to resolve that name to the IP address of
ZoneDirector.
Wildcard Certificates In Smart Redundancy With Captive Portals
In order to prevent redirect loops when deploying SSL certificates in a Smart
Redundant configuration with Guest Access, Web Portal and Hotspot captive
portals, use the following wildcard certificate procedure:
1 Purchase or generate a self-signed wildcard certificate such as *.acompany.com
and install it on both ZoneDirectors in the Smart Redundant pair.
382
Ruckus Wireless, Inc.