Renewing The Certificate Authority's Certificate - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

Choose the file to upload in the Certificate field.
To upload a single certificate, choose a certificate file in PEM (base-64 encoded) or binary format (.crt
or PKCS#7). Leave the passphrase fields blank.
To upload a certificate's private key as a separate file, choose the private key file in PEM (base-64
encoded) format. If the private key has a passphrase, enter it in the Private Key Passphrase and
Confirm Passphrase fields. The private key will be automatically matched to its corresponding
certificate when uploaded.
To upload a combined certificate and private key, choose a file in either PEM (base-64 encoded) or
PKCS#12 format. If the private key has a passphrase, enter it in the Private Key Passphrase and
Confirm Passphrase fields.
Click the
If additional certificates are required, you will remain at the same page. Check the message displayed

above the form to determine which certificate or type of file must be uploaded next.
When the trust chain is complete, it will be displayed. This completes the initialization of the certificate

authority.

Renewing the Certificate Authority's Certificate

When a root certificate is close to expiration, it must be renewed.
Navigate to Onboard > Certificate Authority Settings and click the Renew Root Certificate link. The
Root Certificate Renewal form is displayed.
Select an option in the Renewal Type drop-down list:
Basic Renewal – Uses the same private key for the root certificate, but reissues the root CA certificate

with an updated validity period. Use this option to maintain the validity of all certificates issued by the
CA.
78 | Onboard
Upload Certificate button to save your changes.
ClearPass Guest 3.9 | Deployment Guide