delete radius server certificate in NAC


Hi,

We just upgraded Netsight and we keep getting alarms with regards to an expired radius server certificate in NAC. We are currently doing proxy NAC hence I don't need to update it. Is there a way I can delete it as I don't seem to be able find that option.

9 replies

Userlevel 3
Hi Kunal,

where do you get this alarm? I'm asking, because I miss this alarm in the NetSight / NAC software.

Can you do a screenshot?

In general you can update the certificate.



Regards
Michael
Hi,

We started getting this alarm only after updating to Netsight 6.3, it was not there in previous versions. I can see we can update but wanted to see if there was a way to delete it completely.

Thanks
Userlevel 3
I see, great (for me) that Extreme implemented this feature 🙂

You could delete it in the filesystem but I cannot tell you if this has no sideeffect. In the GUI you cannot delete it. I would recomed to renew it as selfsigned.

Regards
Michael
Userlevel 7
Could it be that your are able to delete it in.....
NAC Manager > Server Information (3rd icon in the task bar) > Certificates > Update Server Certificate > select & remove Files.

I can't try it as I don't have certificates installed on my NAC so my menu is empty....

-Ron
unfortunately no, its the radius server certificate I need to delete which does not show up in the section you suggested.
Userlevel 7
I've just looked thru the alarm manager - you should be able to disable the alarm there.

Netsight Console > Alarms Manager (the bell icon in the task bar) > scroll down to the alarm with name "NAC Certificate Expiring Warning" and disable it.

Hope that works....

-Ron
Userlevel 7
Ron wrote:

I've just looked thru the alarm manager - you should be able to disable the alarm there.

Netsight Console > Alarms Manager (the bell icon in the task bar) > scroll down to the alarm with name "NAC Certificate Expiring Warning" and disable it.

Hope that works....

-Ron

Now I'm not sure whether that is the certificate warning that you are talking about.
If I'm wrong could you post the certificate warning that you get.

-Ron
hi,

thanks for suggestions, for now I have just installed a self signed certificate so no more alarms.
Userlevel 6
Hello,

If you're looking to regenerate the canned server certificate check out this article:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-regenerate-remove-NAC-RADIUS-certif...

Thanks
-Ryan

Reply