delete radius server certificate in NAC

  • 0
  • 1
  • Question
  • Updated 3 years ago
  • Answered
Hi,

We just upgraded Netsight and we keep getting alarms with regards to an expired radius server certificate in NAC.  We are currently doing proxy NAC hence I don't need to update it.  Is there a way I can delete it as I don't seem to be able find that option.
Photo of Kunal Waghela

Kunal Waghela

  • 252 Points 250 badge 2x thumb

Posted 3 years ago

  • 0
  • 1
Photo of Michael Kirchner

Michael Kirchner

  • 1,846 Points 1k badge 2x thumb
Hi Kunal,

where do you get this alarm? I'm asking, because I miss this alarm in the NetSight / NAC software.

Can you do a screenshot?

In general you can update the certificate.


Regards
Michael
Photo of Kunal Waghela

Kunal Waghela

  • 252 Points 250 badge 2x thumb
Hi,

We started getting this alarm only after updating to Netsight 6.3, it was not there in previous versions.  I can see we can update but wanted to see if there was a way to delete it completely.

Thanks
Photo of Michael Kirchner

Michael Kirchner

  • 1,846 Points 1k badge 2x thumb
I see, great (for me) that Extreme implemented this feature :) 

You could delete it in the filesystem but I cannot tell you if this has no sideeffect. In the GUI you cannot delete it. I would recomed to renew it as selfsigned.

Regards
Michael
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 51,458 Points 50k badge 2x thumb
Could it be that your are able to delete it in.....
NAC Manager > Server Information (3rd icon in the task bar) > Certificates > Update Server Certificate > select & remove Files.

I can't try it as I don't have certificates installed on my NAC so my menu is empty....

-Ron
Photo of Kunal Waghela

Kunal Waghela

  • 252 Points 250 badge 2x thumb
unfortunately no, its the radius server certificate I need to delete which does not show up in the section you suggested.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 51,458 Points 50k badge 2x thumb
I've just looked thru the alarm manager - you should be able to disable the alarm there.

Netsight Console > Alarms Manager (the bell icon in the task bar) > scroll down to the alarm with name "NAC Certificate Expiring Warning" and disable it.

Hope that works....

-Ron
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 51,458 Points 50k badge 2x thumb
Now I'm not sure whether that is the certificate warning that you are talking about.
If I'm wrong could you post the certificate warning that you get.

-Ron
Photo of Kunal Waghela

Kunal Waghela

  • 252 Points 250 badge 2x thumb
hi,

thanks for suggestions, for now I have just installed a self signed certificate so no more alarms.
Photo of Yacobucci, Ryan

Yacobucci, Ryan, Multi-Tier Technical Support Engineer

  • 5,734 Points 5k badge 2x thumb
Hello,

If you're looking to regenerate the canned server certificate check out this article:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-regenerate-remove-NAC-RADIUS-certif...

Thanks
-Ryan