Uploading Certificates; Loading Certificates Through Instant Ui - Aruba IAP-335 User Manual

Uploading Certificates

A certificate is a digital file that certifies the identity of the organization or products of the organization. It is
also used to establish your credentials for any web transactions. It contains the organization name, a serial
number, expiration date, a copy of the certificate-holder's public key, and the digital signature of the certificate-
issuing authority so that a recipient can ensure that the certificate is real.
Instant supports the following certificate files:
Authentication server (PEM format)
l
Captive portal server (PEM format)—Customized certificate for internal captive portal server
l
CA certificate (PEM or DER format)
l
RadSec certificate (PEM or DER format)
l
This section describes the following procedures:
Loading Certificates through Instant UI on page 179
l
Loading Certificates through Instant CLI on page 180
l
Removing Certificates on page 180
l
Loading Certificates Through AirWave on page 180
l

Loading Certificates through Instant UI

To load a certificate in the Instant UI:
1. Click the Maintenance link located directly above the Search bar in the Instant main window.
2. Click the Certificates tab. The Certificates tab contents are displayed.
3. To upload a certificate, click Upload New Certificate. The New Certificate window is displayed.
4. Browse and select the file to upload.
5. Select any of the following types of certificates from the Certificate type drop-down list:
CA—CA certificate to validate the identity of the client.
l
Auth Server—The authentication server certificate to verify the identity of the server to the client.
l
Captive portal server—Captive portal server certificate to verify the identity of internal captive portal
l
server to the client.
RadSec—The RadSec server certificate to verify the identity of the server to the client.
l
RadSec CA—The RadSec CA certificate for mutual authentication between the IAP clients and the TLS
l
server.
6. Select the certificate format from the Certificate format drop-down list.
7. If you have selected Auth Server, Captive portal server, or RadSec as the type of certificate, enter a
passphrase in Passphrase and retype the passphrase. If the certificate does not include a passphrase,
there is no passphrase required.
8. Click Browse and select the appropriate certificate file, and click Upload Certificate. The Certificate
Successfully Installed message is displayed.
The IAP database can have only one authentication server certificate and one captive portal server certificate
at any point in time.
When a Captive Portal server certificate is uploaded using the Instant UI, the default management certificate
on the UI is also replaced by the Captive portal server certificate.
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide Authentication and User Management | 179