MSM7xx Controllers Configuration Guide v6.4.0

Status indicator
Indicates the certificate state.
• Green: Certificate is valid.
• Yellow: Certificate will expire soon.
• Red: Certificate has expired.
ID
A sequentially assigned number to help identify certificates with the same common name.
Issued to
Name of the certificate holder. Select the name to view the contents of the certificate.
Issued by
Name of the CA that issued the certificate.
Current usage
Lists the services that are currently using this certificate.
Start/Expiration date
Indicates the period during which the certificate is valid.
Delete
Select to remove the certificate from the certificate store.
Installing a new private key/public key certificate chain pair
NOTE: RADIUS EAP certificates must have the X.509 extensions. Information about this is available
in the Microsoft knowledgebase at: http://support.microsoft.com/kb/814394/en-us
The certificate you install must:
• Be in PKCS #12 format.
• Contain a private key (a password controls access to the private key).
• Not have a name that is an IP address. The name should be a domain name containing at
least one dot. If you try to add a certificate with an invalid name, the default certificate is
restored.
The common name in the certificate is automatically assigned as the domain name of the controller.
1. Specify the name of the certificate file or select Browse to choose one from a list. Certificates
must be in PKCS #7 format.
2. Specify the PKCS #12 password.
3. Select Install to install the certificate.
Default installed private key/public key certificate chains
The following private key/public key certificate chains are installed by default:
• wireless.hp.internal: Default certificate used by the management tool, SOAP server, and
HTML-based authentication.
• Dummy Server Certificate: Used by the internal RADIUS server. This certificate is present only
to allow EAP-PEAP to work if the client chooses not to verify the server's certificate. You should
replace this with your own certificate for maximum security.
• Management Console Default client certificate: This certificate is used to identify the management
tool when it communicates with HP PCM/PMM software.
Managing certificates 379