topic RE: delete radius server certificate in NAC in ExtremeWireless (General)

delete radius server certificate in NAC

Kunal_Waghela — Thu, 23 Jul 2015 17:01:00 GMT

Hi,

We just upgraded Netsight and we keep getting alarms with regards to an expired radius server certificate in NAC. We are currently doing proxy NAC hence I don't need to update it. Is there a way I can delete it as I don't seem to be able find that option.

RE: delete radius server certificate in NAC

Michael_Kirchne — Thu, 23 Jul 2015 17:16:00 GMT

Hi Kunal,

where do you get this alarm? I'm asking, because I miss this alarm in the NetSight / NAC software.

Can you do a screenshot?

In general you can update the certificate.

Regards
Michael

RE: delete radius server certificate in NAC

Kunal_Waghela — Thu, 23 Jul 2015 17:19:00 GMT

Hi,

We started getting this alarm only after updating to Netsight 6.3, it was not there in previous versions. I can see we can update but wanted to see if there was a way to delete it completely.

Thanks

RE: delete radius server certificate in NAC

Michael_Kirchne — Thu, 23 Jul 2015 17:23:00 GMT

I see, great (for me) that Extreme implemented this feature 

You could delete it in the filesystem but I cannot tell you if this has no sideeffect. In the GUI you cannot delete it. I would recomed to renew it as selfsigned.

Regards
Michael

RE: delete radius server certificate in NAC

Ronald_Dvorak — Thu, 23 Jul 2015 17:33:00 GMT

Could it be that your are able to delete it in.....
NAC Manager > Server Information (3rd icon in the task bar) > Certificates > Update Server Certificate > select & remove Files.

I can't try it as I don't have certificates installed on my NAC so my menu is empty....

-Ron

RE: delete radius server certificate in NAC

Kunal_Waghela — Thu, 23 Jul 2015 17:36:00 GMT

unfortunately no, its the radius server certificate I need to delete which does not show up in the section you suggested.

RE: delete radius server certificate in NAC

Ronald_Dvorak — Thu, 23 Jul 2015 23:34:00 GMT

I've just looked thru the alarm manager - you should be able to disable the alarm there.

Netsight Console > Alarms Manager (the bell icon in the task bar) > scroll down to the alarm with name "NAC Certificate Expiring Warning" and disable it.

Hope that works....

-Ron

RE: delete radius server certificate in NAC

Ronald_Dvorak — Thu, 23 Jul 2015 23:34:00 GMT

Now I'm not sure whether that is the certificate warning that you are talking about.
If I'm wrong could you post the certificate warning that you get.

-Ron

RE: delete radius server certificate in NAC

Kunal_Waghela — Fri, 24 Jul 2015 11:54:00 GMT

hi,

thanks for suggestions, for now I have just installed a self signed certificate so no more alarms.

RE: delete radius server certificate in NAC

Ryan_Yacobucci — Mon, 27 Jul 2015 03:45:00 GMT

Hello,

If you're looking to regenerate the canned server certificate check out this article:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-regenerate-remove-NAC-RADIUS-certif...

Thanks
-Ryan