topic Re: Extrame Cloud Captive portal - self signed - certificare warning in ExtremeCloud IQ

Extrame Cloud Captive portal - self signed - certificare warning

marconet_22 — Mon, 02 Nov 2026 07:52:25 GMT

I created Extreme Captive Portal with self sign without email approval.

Now i need to by pass self sign certificate warning.

Which type of certificate will update on device?

Some can explain me ho can get it? Or any manual that explain me how to do it?

Re: Extrame Cloud Captive portal - self signed - certificare warning

Nithisha — Tue, 03 Nov 2026 20:30:16 GMT

Hello @marconet_22 ,

Guests who connect to the self-registration captive portal may see a “Your connection is not private” or certificate warning. This happens because the portal is using the default self-signed certificate that comes with ExtremeCloud IQ. Browsers do not trust that certificate, so they show the warning.

To remove the warning, replace the default certificate with a trusted one for the portal’s hostname:

Pick a portal hostname, such as portal.yourcompany.com, and make sure it points to the portal.
In ExtremeCloud IQ, generate a Certificate Signing Request (CSR) for that hostname.
Submit the CSR to a public certificate authority, or to your internal certificate authority.
Install the signed certificate and its private key in ExtremeCloud IQ.
Applying a certificate restarts the management service, so the portal will be unavailable for a few seconds. Schedule the change for a quiet period.

If your guest devices are company-managed, you can also install your internal certificate authority on them through your device management tool. Guests on personal devices will still need a publicly trusted certificate.

Please contact Extreme Networks support if you need help with the steps above.

References:

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000094063

https://extreme-networks.my.site.com/ExtrArticleDetail?an=000119138

Re: Extrame Cloud Captive portal - self signed - certificare warning

marconet_22 — Wed, 04 Nov 2026 09:15:47 GMT

Hi Nithisha

The users connect to public extreme web site and they can self register to portal or get authentication with credentials received after registration.

I tried with wireshark and I found that client open web browser to msftconnecttest.com that is default windows access when try to connect captive portal. If I set "portal.yourcompany.com" which is the ip address of the portal?