Developer

 View Only

  • 1.  ClearPass API : private_key_type for ECC (Self Sign or CSR)

    Posted Sep 14, 2026 07:34 AM

    Hi,

    I try to generate a CSR or Self Sign Certificat using API with ECC private_key_type

    From api-docs or developer hub portal ( Create a Self-Signed Certificate

    ClearPass Policy Manager remove preview
    Create a Self-Signed Certificate
    Create a Self-Signed Certificate
    View this on ClearPass Policy Manager >

    Need to use 

    {
  "private_key_type": "nist/secg curve over a 256 bit prime field",
  "digest_algorithm": "SHA-1",
  "subject_CN": "test"
}

    but get error about wrong type 

    Any idea ? 



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------


  • 2.  RE: ClearPass API : private_key_type for ECC (Self Sign or CSR)

    Posted Sep 14, 2026 08:28 AM

    If that's on ClearPass 6.14, it may be on the SHA-1 for which support has been removed. Regardless, go for for SHA-256 or 384.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: ClearPass API : private_key_type for ECC (Self Sign or CSR)

    Posted Sep 14, 2026 08:37 AM

    Hi Herman,

    I try also with 6.11 and 6.12 

    and yes i don't use SHA-1 (it is only a copy/paste of developer by default...)



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------

    Original Message


  • 4.  RE: ClearPass API : private_key_type for ECC (Self Sign or CSR)

    Posted 30 days ago

    Please open a TAC case if what is written in documentation does not work... (after ruling out the most obvious thing, which I think we have done).



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 5.  RE: ClearPass API : private_key_type for ECC (Self Sign or CSR)

    Posted 30 days ago

    Yes, 

    I think a make a typo first time, it is now working but i found some other issue.

    For Self Signed Certificate, there is no option for choice number of valid day (like GUI...)

    and for CSR, when try to use SERVER certificate_type but already open an issue to TAC and waiting feedback...



    ------------------------------
    PowerArubaSW : Powershell Module to use Aruba Switch API for Vlan, VlanPorts, LACP, LLDP...

    PowerArubaCP: Powershell Module to use ClearPass API (create NAD, Guest...)

    PowerArubaCL: Powershell Module to use Aruba Central

    PowerArubaCX: Powershell Module to use ArubaCX API (get interface/vlan/ports info)..

    ACEP / ACMX #107 / ACDX #1281
    ------------------------------

    Original Message


Related Content