Aruba ClearPass Workshop (2021) - Guest Access #1 Aruba Instant Wireless Guest (getting started)

[@AshtonCoolman]

Thanks for the video series. This work will basically be the week for me.

[@HenkLeeuw-by5of]

@hermanrobers, is it possible to create a Clearpass server certificate (for guest captive portal) from a domain wildcard certificate and do you have a manual on that? Thank you

[@hermanrobers]

Yes, you can use a wildcard certificate for ClearPass Guest Captive portal. In the Getting Started #3 video, I show how to install it. In the video, I use a domain wildcard. there is no need to convert/create if you have a wildcard certificate already. Link: kzbin.info/www/bejne/iWqtXmSAhpaJarM

[@chaibiimed230]

Thanks for this explantation. i want to ask you about how to configure captive portale without certificat

[@hermanrobers]

That is not really possible. Plain HTTP is getting more and more problematic as browser start complaining that it is insecure. When you transfer credentials or personal information like self registration, SSL encryption is required. If you have your APs managed by Aruba Central, that comes with a trusted certificate (for the AP).

[@chaibiimed230]

​@@hermanrobers if I have a virtual controller managed by two mobilitys master, which ip address I need to upgrade to wizar configuration. Thanx

[@hermanrobers]

@@chaibiimed230 this video is about Aruba Instant, which is not managed by MM. You can check for Mobility controllers and MM this video series: kzbin.info/www/bejne/el7ah2hrg52bncU

[@user-qq2fs6hc9x]

Hi herman. One question should the certificate uploaded to clearpass have as cn the name of the server on clearpass? Or a wildcard certificate is fine, which I can upload to both the virtual control and clearpass (the same certificate)

[@hermanrobers]

The CN is no longer relevant these days, it's about the SAN (and CN is typically copied as the first SAN). You can use a (the same) wildcard certificate for both ClearPass and the virtual controller if you have one.

[@user-qq2fs6hc9x]

@@hermanrobers thanks