Users Guide

Table Of Contents
837| Management Access Dell Networking W-Series ArubaOS 6.5.x| User Guide
Uploading the Certificate
When using the “rapconsole.dell.com” page on a bridge/split-tunnel RAP to manage certificates on the RAP, a blank
page or a page that does not have the Certificates tabs on it may display. The RAP provisioning page that is standard
on the RAP may conflict with the “rapconsole” page and thus confuse the browser. If this occurs, clear your browser
cache first or use two different browsers.
The Upload button on the RAP console page that lets you upload the certificates to the RAP flash. The
certificate needs to be in PEM format and uploading the RAP certificate requires that the corresponding private
key is present in the RAP flash. Or, use the PKCS12 bundle where the chain includes the RAP private key with
the RAP and CA certificates are optionally password protected.
Storing CSR and Private Key Files in a USB
To provision a RAP to store the CSR and private key in a USB, use one of the following options:
AP Boot Prompt
At the AP boot prompt, issue the setenv usb_csr 1 and setenv usb_type 100 commands.
If this option is used to provision the RAP to store the files in the USB device, after the files are saved in the USB, enter
the AP boot prompt to issue the setenv usb_csr 0 command. This is mandatory.
In the WebUI
1. Navigate to Configuration > Wireless > AP Installation > Provisioning.
2. Select the RAP, click Provision.
3. Under USB Settings, select the USB Parameters check box.
4. Select the USB storage for CSR/Key check box.
5. Select Device Type as storage.
6. Click Apply and Reboot.
In the CLI
(host) (config) #provision-ap
(host) (AP provisioning) #read-bootinfo ap-name <ap name>
(host) (AP provisioning) #usb-csr
(host) (AP provisioning) #usb-type storage
RAP Console
1. Navigate to Configuration > Management > Certificates.
2. For Store CSR and key in USB/Flash, select USB from the drop-down list.
After the RAP is provisioned to store the CSR and private key in a USB, log in to the RAP console, export the CSR
and private key files to the USB. A .p12 certificate file format must be manually created as the RAP certificate in
the USB to bring up the IKE/IPSEC connection.
Implementing a Specific Management Password Policy
By default, the password for a new management user has no requirements other than a minimum length of 6
alphanumeric or special characters. However, if your company enforces a best practices password policy for
management users with root access to network equipment, you may want to configure a password policy that
sets requirements for management user passwords.