Cisco Systems OL-17037-01 manual Config certificate lsc enable disable

Chapter 7 Controlling Lightweight Access Points

Autonomous Access Points Converted to Lightweight Mode

Step 7 To add the CA certificate into the controller’s CA certificate database, hover your cursor over the blue drop-down arrow for the certificate type and choose Add.

Step 8 To provision the LSC on the access point, click the AP Provisioning tab and check the Enable AP Provisioning check box.

Step 9 To add access points to the provision list, enter the access point MAC address in the AP Ethernet MAC Addresses field and click Add.

Note To remove an access point from the provision list, hover your cursor over the blue drop-down arrow for the access point and choose Remove.

Note If you configure an access point provision list, only the access points in the provision list are provisioned when you enable AP provisioning. If you do not configure an access point provision list, all access points with a MIC or SSC certificate that join the controller are LSC provisioned.

Step 10 Click Apply to commit your changes.

Using the CLI to Configure LSC

Using the controller CLI, follow these steps to enable the use of LSC on the controller.

Step 1 To enable LSC on the system, enter this command:

config certificate lsc {enable disable}

Step 2 To configure the URL to the CA server, enter this command:

config certificate lsc ca-server http://url:port/path

where url can be either a domain name or IP address.

Note You can configure only one CA server. To configure a different CA server, delete the configured CA server using the config certificate lsc ca-server delete command; then configure a different CA server.

Step 3 To add the LSC CA certificate into the controller’s CA certificate database, enter this command:

config certificate lsc ca-cert {add delete}

Step 4 To configure the parameters for the device certificate, enter this command:

config certificate lsc subject-params country state city orgn dept email

Note The common name (CN) is generated automatically on the access point using the current MIC/SSC format Cxxxx-MacAddr, where xxxx is the product number.

Step 5 To configure a key size, enter this command:

config certificate lsc other-params keysize

The keysize is a value from 384 to 2048 (in bits), and the default value is 2048.

	Cisco Wireless LAN Controller Configuration Guide
7-20	OL-17037-01