Users Guide

127 | Control Plane Security Dell Networking W-Series ArubaOS 6.4.x| User Guide
Parameter Description
Cert Type The type of certificate used by the campus AP.
l switch-cert: The campus AP is using a certificate signed by the
controller.
l factory-cert: The campus AP is using a factory-installed certificate.
State The state of a campus AP.
l unapproved-no-cert: The campus AP has no certificate and is not
approved.
l unapproved-factory-cert: The campus AP has a pre-installed
certificate which is not approved.
l approved-ready-for-cert: The campus AP is approved as valid and is
ready to receive a certificate.
l certified-factory-cert: The campus AP already has a factory
certificate. If a campus AP has a factory-cert type of certificate and is
in certified-factory-cert state, then a new certificate is not reissued
to the campus AP when you enable automatic certificate provisioning.
l certified-switch-cert: The campus AP has an approved certificate
from the controller.
l certified-hold-factory-cert: The campus APis certified with a factory
certificate but requests to be certified again. Such APs are not
approved as secure until you manually change the status and verify
that it is not compromised.
NOTE: If an AP is in this state due to connectivity problems, then the AP
recovers and leaves this hold state as soon as connectivity is restored.
l certified-hold-switch-cert: An AP is put in this state when the
controller thinks the AP has been certified with a controller certificate
but the AP requests to be certified again. Because this is not a normal
condition, the AP is not approved as a secure AP until a network
administrator manually changes the status of the AP to verify that it is
not compromised.
NOTE: If an AP is in the hold state because of connectivity problems, then
the AP recovers and moves out of the hold state when connectivity is
restored.
Revoked Shows if the secure status of the AP is revoked.
Revoked Text Brief description for revoking the campus AP.
Last Update Time and date of the last AP status update.
Table 22: Additional Campus AP Status Information
To view information about the campus and remote AP whitelists using the CLI, use the following commands:
(host) #show whitelist-db cpsec
ap-group <ap_group>
ap-name <ap_name>
cert-type {factory-cert|switch-cert}
mac-address <name>
page <num>
start <offset>
state {approved-ready-for-cert|