Dell W-7030 AOS 6.4.x CLI Reference Guide - Page 2231

Usage Guidelines There is a default server certificate installed in the controller, However this certificate does not guarantee security in production networks. Best practices are to replace the default certificate with a custom certificate issued for your site by a trusted Certificate Authority (CA). See the Dell Networking W-Series ArubaOS User Guide for more information about how to generate a Certificate Signing Request (CSR) to submit to a CA and how to import the signed certificate received from the CA into the controller. After importing the signed certificate into the controller, use the web-server profile command to specify the certificate for captive portal or WebUI access. If you need to specify a different certificate for captive portal or WebUI access, use the no command to revert back to the default certificate before you specify the new certificate (see the Example section). You can use client certificates to authenticate management users. If you specify certificate authentication, you need to configure certificate authentication for the management user with the mgmt-user webui-cacert command. Example The following commands configure WebUI access with client certificates only, and specify the server certificate for the controller: (host) (config) #web-server profile (host) (Web Server Configuration) #mgmt-auth certificate (host) (Web Server Configuration) #switch-cert ServerCert1 (host) (Web Server Configuration) #! (host) (config) #mgmt-user webui-cacert test_string serial 1111 admin root To specify a different server certificate, use the no command to revert back to the default certificate before you specify the new certificate: (host) (config) #web-server profile (host) (Web Server Configuration) #mgmt-auth certificate (host) (Web Server Configuration) #switch-cert ServerCert1 (host) (Web Server Configuration) #no switch-cert (host) (Web Server Configuration) #switch-cert ServerCert2 Command History Version ArubaOS 3.0 Modification Command introduced. ArubaOS 3.1 The mgmt-auth parameter was introduced. ArubaOS 3.2 The captive-portal-cert parameter was introduced. ArubaOS 6.3 The following new parameters were introduced: l web-https-port-443 l web-lync-listen-port ArubaOS 6.3.1.0 Under the web-lync-listen-port, the following two parameters were introduced: l http 2231 | web-server profile Dell Networking W-Series ArubaOS 6.4.x | User Guide