Wired Intelligent Edge

Hi,
 
When configuring a  2930 to do device fingerprinting, there is a command that lets you store the root CA associated with  a clearpass server automagically ....  Just looking at the latest and greatest CX firmware trying to find out iof theres an equivalent command ( to down load a CA cert) in CX land

A

------------------------------
Alex Sharaz
------------------------------

I don't think that is possible for CX in the current versions. It may be good to import the root through a management/central configuration tool anyway to avoid the risk that the switch will download a rogue certificate the first time and use that. Feature requests can be filed through the Aruba Innovation Zone which is available to Aruba partners. If you don't have access, get the request in through your Aruba partner or local Aruba SE.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Agreed would be better to use some form of management platform to upload root CA, but if you don’t have that capability and 2000 2930s the automagic ca upload works a treat
Rgds
A
Ps
Yup manually uploaded. CA bro test 6200 and the DUP works just fine

Sent from my iPhone


Original Message:
Sent: 5/20/2022 10:19:00 AM
From: Herman Robers
Subject: RE: installing root CA certs on a CX switch

I don't think that is possible for CX in the current versions. It may be good to import the root through a management/central configuration tool anyway to avoid the risk that the switch will download a rogue certificate the first time and use that. Feature requests can be filed through the Aruba Innovation Zone which is available to Aruba partners. If you don't have access, get the request in through your Aruba partner or local Aruba SE.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------