Skip to main content

Search

How can we help ?

Add a certificate on a Cisco Wireless Controller (Cisco WLC)

Alexandre de THOMASSON
  • Updated

Describes how to install a custom Certificate SSL on your Cisco Wireless Controller to avoid HTTPS warnings

Use case

The following sections provide step-by-step instructions for adding a certificate to a Cisco wireless controller (Cisco WLC).

Prerequisites

  • Access to Cloudi-Fi's admin console

  • Access to the Cisco

  • Enable and configure the captive portal on Cisco to Cloudi-Fi.

Why should you use a TSL/SSL certificate?

Before starting, why should you use a certificate? TLS/SSL certificates secure internet connections by encrypting your data. They ensure data is transmitted privately, without modification, loss, or theft. Adding a certificate to your WLC will provide a safer internet experience for your users.

Moreover, some browsers might block authentication on HTTP pages. Using a certificate will permit access to HTTPS pages, and your users will be able to authenticate.

Now, we can see how to add a certificate to your Cisco WLC.

1. Configure a TFTP server

First, you have to configure a TFTP server. (You can download an accessible TFTP Server by following this link.)

Add the certificate to your TFTP-Root directory. This directory has to be the storage of the TFTP server.

Add a certificate on a Cisco Wireless Controller (Cisco WLC)_add the certificat Add a certificate on a Cisco Wireless Controller (Cisco WLC)_TFTP Server service status

TFTP server setup on Cloudi-Fi captive portal

2. Download the SSL certificate to set the TFTTP IP address

Then, on your WLC,

  • Go to Security Web Auth Certificate.
  • Click on "Download SSL Certificate."
  • Set your TFTP server’s IP address  (don’t forget the filename and extension ".pem"),
  • And the certificate password.

Your certificate has to be as described in this link:

Add a certificate on a Cisco Wireless Controller (Cisco WLC)_Download SSL Certificat from server

You can press "Apply." The certificate is downloaded on the controller.

Add a certificate on a Cisco Wireless Controller (Cisco WLC)_Check current certificate

Once the transfer is completed successfully, go to Controller Interfaces.

Select your virtual interface.

Change the IP Address to "192.0.2.2"  and the DNS Host Name to "login.3wi.fi".

Add a certificate on a Cisco Wireless Controller (Cisco WLC)_change the IP address

3. Enable HTTP Access AND WebAuth SecureWeb

In Management > HTTP/HTTPS, Enable

  • HTTP Access
  • HTTPS Access
  • HTTPS Redirection
  • WebAuth SecureWeb 

Cisco WLC Interface - Enable WebAuth SecureWeb for SSL certificate

4. Reboot your controller

Now, you have to reboot your controller. The new certificate takes effect after that.

Troubleshooting

If you encounter some problems installing your certificate, you can follow this link.

Otherwise, if you have any issues, don't hesitate to get in touch with us.

What’s Next?

Please refer to this page for additional details regarding Cisco and Cloudi-Fi configurations.

For more information, you can access the Cisco how-to Video and Solution Brief from the Cloudi-fi Cisco Partner page.