Cisco Cisco Wireless LAN Controller Module Technical Manual

Page of 11
Contents
Introduction
Prerequisites
Requirements
Components Used
Chained Certificates
Support for Chained Certificate
Certificate Levels
Step 1. Generate a CSR
Option A. CSR with OpenSSL
Option B. CSR Generated by the WLC
Step 2. Get the Certificate Signed
Option A: Obtain the Final.pem File from your Enterprise CA
Option B: Obtain the Final.pem File from a Third-Party CA
Step 3 CLI. Download the Third-Party Certificate to the WLC with the CLI
Step 3 GUI. Download the Third-Party Certificate to the WLC with the GUI
Troubleshoot
Related Information
Introduction
This document describes how to generate a Certificate Signing Request (CSR) in order to obtain a
third-party certificate and how to download a chained certificate to a Wireless LAN (WLAN)
controller (WLC).
Prerequisites
Requirements
Before you attempt this configuration, you should have knowledge of these topics:
How to configure the WLC, the Lightweight Access Point (LAP), and the wireless client card
for basic operation
How to use the OpenSSL application
Public key infrastructure and digital certificates
Components Used
The information in this document is based on these software and hardware versions:
Cisco 5508 WLC that runs firmware Version 8.3.102
OpenSSL application for Microsoft Windows
Enrollment tool that is specific to the third-party Certification Authority (CA)
The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is