ExtremeCloud IQ- Site Engine & Extreme Management Center

  • 1.  How to configure certificates in guest portal?

    Posted 05-20-2015 11:41
    I want that clients which log in to the guest portal page, don't get the security warning from the browser. Is it sufficient to create a certificate at guestportal topology interface? How should be the CN name and OU name entry in the csr request file?



  • 2.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 11:46


  • 3.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 11:46
    Also, the CN typically will be a name that is unique to a single controller. You can use a wildcard cert that could cover multiple controllers. *.


  • 4.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 11:46
    Hello, now I got the certificates from the CA. See below.
    - Linux (pem+cabundle)

    - - cert.cabundle ---> (containing thawte DV SSL CA - G2 and thawte Primary Root CA)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Plesk (Certificate+CACertificate)

    - - cacertcertificate.crt ---> (containing thawte DV SSL CA - G2 and thawte Primary Root CA)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Windows (pem)

    - - intermediate2.crt ---> (containing thawte Primary Root CA)

    - - intermediate1.crt ---> (containing thawte DV SSL CA - G2)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Sonstige (pem)

    - - root.crt ---> (containing Thawte Premium Server CA)

    - - intermediate2.crt ---> (containing thawte Primary Root CA)

    - - intermediate1.crt ---> (containing thawte DV SSL CA - G2)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Sonstige (pkcs7)

    - - certificate.cer ---> (containing all certificate)

    which file should I install at the Guest Portal Interface?





  • 5.  RE: How to configure certificates in guest portal?

    Posted 07-13-2015 17:50
    Hello, now I got the certificates from the CA. See below.
    which file should I install at the Guest Portal Interface?
    - Linux (pem+cabundle)

    - - cert.cabundle ---> (containing thawte DV SSL CA - G2 and thawte Primary Root CA)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Plesk (Certificate+CACertificate)

    - - cacertcertificate.crt ---> (containing thawte DV SSL CA - G2 and thawte Primary Root CA)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Windows (pem)

    - - intermediate2.crt ---> (containing thawte Primary Root CA)

    - - intermediate1.crt ---> (containing thawte DV SSL CA - G2)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Sonstige (pem)

    - - root.crt ---> (containing Thawte Premium Server CA)

    - - intermediate2.crt ---> (containing thawte Primary Root CA)

    - - intermediate1.crt ---> (containing thawte DV SSL CA - G2)

    - - certificate.crt ---> (containing wlandd.macrander-zertifikat.de)

    - Sonstige (pkcs7)

    - - certificate.cer ---> (containing all certificate)



  • 6.  RE: How to configure certificates in guest portal?

    Posted 10-28-2016 07:19
    Hi Frank,
    what file have you installed?
    Works this now?

    And which option?


    Br,

    Mario


  • 7.  RE: How to configure certificates in guest portal?

    Posted 10-25-2019 17:52

    I was just wondering if you got this sorted out. I am in a similar position where we are running the Extreme NAC for a Wifi captive portal login on our internal domain. Trying to figure out how i can get a Public SSL cert for this internal domain for the extreme nac so our users do not get an non secure ssl error.



  • 8.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 11:50
    Your guest clients need to trust the root certificate so for a guest network that would mean that you need to buy one from i.e. Verisign.
    If you just put in one that you've generated by yourself the external guest still get the security warning as they don't trust this certificate.


  • 9.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 12:06
    For reference we can turn off the cert requirements on all portal services but that just means everything goes through the network in clear text.

    http://gtacknowledge.extremenetworks.com/articles/Solution/Wireless-client-browser-displays-error-captive-portal-data-file-does-not-exist



  • 10.  RE: How to configure certificates in guest portal?

    Posted 05-20-2015 12:19
    thanks for fast response, I suspected the controller sends a validation request to CA with the public IP Address and it is important that the DNS name solves the used IP Address in the Internet. The certificate will be from "thawte" and should so accepted of all common browsers.