topic Re: Update Certificate in ExtremeControl

Update Certificate

Bernd_Gruetzke — Mon, 23 Nov 2020 18:39:20 GMT

Hi anybody,

I have an external applied radius certificate and the EMC radius certificate is empty.

Is the following procedure all I need to do?

cd /opt/nac/radius/raddb/certs

rm external_server.pemrm external_server.keystore

nacctl restart

What are the risk during this procedure?

BR Bernd

Re: Update Certificate

Miguel-Angel_RO — Tue, 24 Nov 2020 22:32:57 GMT

Bernd,

The folder you mention is in the NAC not in the XMC, you are mixing different things and.

Before deleting anything I suggest to describe your request with more details.

On the other hand, if you do a webview on you access control engine and go to Diagnostics/Certificate Diagnostics you’ll see a detail of the certificates

On the nac, if you type “root@controlengine.chjltn.local:$ openssl x509 -text -in /opt/nac/radius/raddb/certs/external_server.pem” you’ll have the identification of the certificate and you’ll be able to see where it is used.

Mig

Re: Update Certificate

Bernd_Gruetzke — Wed, 25 Nov 2020 18:50:09 GMT

Hi Mig,

the message was in EMC :

I find a solution I thought “https://extremeportal.force.com/ExtrArticleDetail?n=000006216”. I my case there is no entrance for radius:

So I thougth the resoluion is to do only on nac-server like described obove.

BR Bernd

Re: Update Certificate

Miguel-Angel_RO — Wed, 25 Nov 2020 18:53:59 GMT

Bernd,

What is the output of “root@controlengine.chjltn.local:$ openssl x509 -text -in /opt/nac/radius/raddb/certs/external_server.pem”?

This has to be compared with the diagnostic view of the nac to be sure.

Mig

Re: Update Certificate

Bernd_Gruetzke — Sat, 28 Nov 2020 00:09:14 GMT

Hi Mig,

I found all informations, thank you for helping!

BR Bernd