Alcatel-Lucent AOS-W 6.5.3.x - Page 847

The subject of the RAP certificate needs to be the MAC address of the RAP, and nothing more. Note that this is
case insensitive.
If you create a CSR on the RAP and then have a certificate issued by a CA, you must have the certificate in PEM
format before uploading it to the RAP.
Uploading the Certificate
When using the “rapconsole.alcatel-lucent.com” page on a bridge/split-tunnel RAP to manage certificates on the RAP,
a blank page or a page that does not have the Certificates tabs on it may display. The RAP provisioning page that is
standard on the RAP may conflict with the “rapconsole” page and thus confuse the browser. If this occurs, clear your
browser cache first or use two different browsers.
The Upload button on the RAP console page that lets you upload the certificates to the RAP flash. The
certificate needs to be in PEM format and uploading the RAP certificate requires that the corresponding private
key is present in the RAP flash. Or, use the PKCS12 bundle where the chain includes the RAP private key with
the RAP and CA certificates are optionally password protected.
Storing CSR and Private Key Files in a USB
To provision a RAP to store the CSR and private key in a USB, use one of the following options:
AP Boot Prompt
At the AP boot prompt, issue the setenv usb_csr 1 and setenv usb_type 100 commands.
If this option is used to provision the RAP to store the files in the USB device, after the files are saved in the USB, enter
the AP boot prompt to issue the setenv usb_csr 0 command. This is mandatory.
In the WebUI
1. Navigate to Configuration > Wireless > AP Installation > Provisioning.
2. Select the RAP, click Provision.
3. Under USB Settings, select the USB Parameters check box.
4. Select the USB storage for CSR/Key check box.
5. Select Device Type as storage.
6. Click Apply and Reboot.
In the CLI
(host) (config) #provision-ap
(host) (AP provisioning) #read-bootinfo ap-name <ap name>
(host) (AP provisioning) #usb-csr
(host) (AP provisioning) #usb-type storage
RAP Console
1. Navigate to Configuration > Management > Certificates.
2. For Store CSR and key in USB/Flash, select USB from the drop-down list.
AOS-W 6.5.3.x | User Guide Management Access | 847