Multiple Control Servers - Certificates

Jay2009 — Mon, 18 Nov 2019 23:41:27 GMT

Hello,

If I am deploying multiple Control servers, do I need to have the names of each server added to the SAN of the certs installed on the Control servers?

I am thinking captive portal cert; yes, and RADIUS cert; no?

Am I correct?

Re: Multiple Control Servers - Certificates

Keene__Scott — Wed, 20 Nov 2019 22:25:34 GMT

Hello,

No you do not. There is no specific requirement for this; you can use SAN certs if you'd like, but typically folks deploy a unique FQDN cert for each NAC appliance (I also answered this in the case you created with GTAC). I’m not sure what you mean by this: “I am thinking captive portal cert; yes, and RADIUS cert; no?” You can use the same FQDN cert on a NAC for RADIUS and Captive Portal ...just don’t use a ‘wildcard’ cert for RADIUS.

Regards,

Scott Keene

NMS/NAC Support - Extreme Networks

topic Re: Multiple Control Servers - Certificates in ExtremeCloud IQ- Site Engine Management Center

Multiple Control Servers - Certificates

Re: Multiple Control Servers - Certificates