MSM7xx Controllers Configuration Guide v6.4.0

Under Authentication to the peer, select a new Local certificate and then select Save.
About certificate warnings
Access to the management tool and the public access interface Login page occur through a secure
connection (SSL/TLS). An X.509 certificate is used to validate this connection. The default X.509
certificate installed on the controller for SSL/TLS for access to the management tool and the public
access interface is not registered with a certificate authority. It is a self-signed certificate that is
attached to the default IP address (192.168.1.1) for the controller LAN port. As a result, certificate
warnings will appear at login until you install a valid, trusted certificate on the controller.
The host name in the currently installed SSL certificate is automatically assigned as the domain
name of the controller. You do not have to add this name to your DNS server for it to be resolved.
The controller intercepts all DNS requests it receives on the wireless or LAN ports. It resolves any
request that matches the certificate host name by returning the IP address assigned to the wireless
port. All other DNS requests are forwarded to the appropriate DNS servers as configured on the
Network > DNS page.
This means that once a valid, trusted certificate is installed on the controller, users will no longer
see a certificate warning message when logging in.
IPSec certificates
IPSec certificates are managed on the lower portion of the Controller >> VPN > IPSec page.
Managing certificates 381