Certain Aruba Mobility Controller configurations may require a SSL certificate. If you need to install or update an existing SSL certificate follow these steps.

1. Download the certificate from your provider. Make sure you grab any intermediate and root certificates applicable.
2. Merge the server, intermediate(s), and root certificates into a single .crt file.
3. Convert the .crt certificate to a PKCS#12 (.pfx) file. You'll need the private key password to complete this conversion and don't forget to apply an export password or Aruba ClearPass will refuse the import.
4. Navigate to "Configuration", "Management", "Certificates" and import the certificate.
5. Once uploaded navigate to "Configuration", "Management", "General" and apply the certificate under the WebUI Management Authentication Method via the Server Certificate form.
6. Once complete set a calendar reminder for when the certificate expires.

Certain Aruba ClearPass configurations may require a SSL certificate. If you need to install or update an existing SSL certificate follow these steps.

1. Download the certificate from your provider. Make sure you grab any intermediate and root certificates applicable.
2. Merge the server, intermediate(s), and root certificates into a single .crt file.
3. Convert the .crt certificate to a PKCS#12 (.pfx) file. You'll need the private key password to complete this conversion and don't forget to apply an export password or Aruba ClearPass will refuse the import.
4. Navigate to "Administration", "Certificates", "Certificate Store", and import the certificate twice, once for the RADIUS/EAP Server Certificate and once for the HTTPS Server Certificate.
5. Once complete set a calendar reminder for when the certificate expires.

The following commands will enable you to recover your missing password for any Aruba Mobility Controller.

User: password
Password: forgetme!
(aruba) >enable
Password: enable
(aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(aruba) (config) #mgmt-user admin root
Password:
Re-Type password:
(aruba) (config) #exit
(aruba) #exit
(aruba) >exit


User: admin
Password:
(aruba) >enable
Password: enable
(aruba) #configure terminal
Enter Configuration commands, one per line. End with CNTL/Z
(aruba) (config) #enable secret
Password:
Re-Type password:
(aruba) (config) #write memory

Seattle, WA.

If you find that your self-signed certificate has expired or you changed the host name and want to regenerate said certificate apply these commands.

sed s/"localhost.localdomain"/"<hostname>"/ /root/svn/mercury/lib/conf/openssl.cnf > /tmp/openssl.cnf
/usr/bin/openssl req -new -key /etc/httpd/conf/ssl.key/server.key -x509 -days 1827 -out /etc/httpd/conf/ssl.crt/server.crt -config /tmp/openssl.cnf 2> /dev/null
cat /etc/httpd/conf/ssl.crt/server.crt > /etc/httpd/conf/ssl.pem
echo '' >> /etc/httpd/conf/ssl.pem
cat /etc/httpd/conf/ssl.key/server.key >> /etc/httpd/conf/ssl.pem
chmod 0600 /etc/httpd/conf/ssl.pem
chown root.root /etc/httpd/conf/ssl.pem
make deploy_httpd_conf >> /tmp/amp-install.log 2>&1
service httpd restart > /dev/null
service pound restart > /dev/null

Seattle, WA.