Versionen im Vergleich

Alte Version 11

changes.mady.by.user LANCOM Redaktion

Gespeichert am

verglichen mit

Neue Version Aktuell

changes.mady.by.user LANCOM Redaktion

Gespeichert am

Schlüssel

  • Diese Zeile wurde hinzugefügt.
  • Diese Zeile wurde entfernt.
  • Formatierung wurde geändert.


Seiteneigenschaften



How you transfer certificates between WLAN controllers with a firmware version older than LCOS 9 is described in the following Knowledge Base article Image Removed.


Description:
This document describes how to use a LANCOM WLAN controller with the One Click Backup feature to backup existing certificates and then transfer them to another LANCOM WLAN controller. This can be useful, if for example, an existing WLAN Controller is to be replaced by a new one.


Requirements:
Info
  •  


Procedure:

1) Steps to carry out on the source device:

1.1) Creating the One Click Backup:
On the LANCOM WLAN controller containing the certificates, you first perform a backup to the CA (certification authority). The backup is stored on the WLAN controller.
  • Open a CLI session via SSH on the WLAN controller and run following command:
    do /Setup/Certificates/SCEP-CA/CA-certificates/Create-PKCS12-Backup-Files <password>
Info

At this point you set the <password> to a password of your choice.The password is required because it is only possible to upload certificate containers to a LANCOM device if a password has been set.

Image Removed

Image Added

You then enter the command ls /Status/File-System/Contents. This allows you to check whether the backup files were successfully created. The following files should appear in the list:

  • scep_ca_backup
  • scep_ra_backup
Image Removed

Image Added


1.2) Exporting the "One Click Backup":
1.2.1) Exporting the "One Click Backup" via LANconfig:
1.2.1.1) Mark the WLAN Controller in LANconfig, perform a rightclick, and in the context menu select Configuration Management → Save Certificate as File .
Image Modified
1.2.1.2
Wählen Sie einen Speicherort aus, passen bei Bedarf den Dateinamen an und wählen als Zertifikattyp die 
) Choose a folder location, edit the File Name if necessary and select the option Option SCEP-CA - One Click Backup
 aus. Klicken Sie anschließend auf Speichern
as Certificate . Click Save afterwards .

1.2.2) Exporting the "One Click Backup" via WEBconfig:
Open the configuration of the WLAN Controller in a web browser, go to the menu (Extras) → File Management → Download Certificate or File and select the option SCEP CA - One click Backup as File Type.
Click Start Download afterwards and save the backup to the desired folder.
Image Modified


2) Steps to carry out on the target device:

The new WLAN Controller has to be in factory state! If the device was already configured or the backup of the old WLAN Controller was uploaded, the device has to be reset to factory state.

2.1) Uploading the "One Click Backup":
2.1.1)
Hochladen des
Uploading the "One Click Backup"
per
via LANconfig:
2.1.1.1) Mark the WLAN Controller in LANconfig, perform a rightclick, and in the context menu select Configuration Management → Upload Certificate or File .
Image Modified
2.1.1.2)
Wählen Sie das gespeicherte 
Select the SCEP-CA - One Click Backup
 aus, wählen bei Zertifikattyp die OptionSchritt
file, select the o ption  SCEP-CA - One Click Backup
 aus und geben das Zert.-Passwort ein (siehe 
as Certificate and enter the Cert. password (see step 1.1 ).
Klicken Sie anschließend auf Öffnen, um das Backup in das Gerät zu ladenWählen Sie anschließend das Backup über die Option Datei auswählen aus und geben bei Passphrase das Zertifikat-Passwort ein (siehe Schritt
  Click Open afterwards to upload the backup to the device .

2.1.2) Uploading the "One Click Backup" via WEBconfig:
Open the configuration of the WLAN Controller in a web browser, go to the menu (Extras) → File Management → Upload Certificate or File and select the option SCEP CA - One click Backup as File Type. 
Öffnen Sie die Konfiguration des WLAN-Controllers im Browser, wechseln in das Menü (Extras) → LCOS-Menübaum → Dateimanagement → Zertifikat oder Datei hochladen und wählen als Dateityp die Option SCEP-CA - One Click Backup aus.
Afterwards select the backup at File Name/Location and enter the Passphrase for the One Click Backup (see step 1.1).
 
Then click Start Upload
Klicken Sie zuletzt auf Upload starten
.
Image Modified


2.
3
2) Uploading the script configuration of the old WLAN Controller into the new device:


Info

The main device password isn't included in a script configuration and therefore has to be set manually after importing the script.

2.

3

2.1) Uploading the script configuration via LANconfig:

2.
3
2.1.1)
Markieren Sie den neuen WLAN-
Mark the WLAN Controller in LANconfig,
führen einen Rechtsklick aus und wählen im Kontextmenü Konfigurations-Verwaltung → Aus Skript-Datei wiederherstellen aus.
perform a rightclick, and in the context menu select   Configuration Management → Restore Script from File.
Image Added
2.2
2.3
.1.2)
Wählen Sie die Skript-Sicherung aus und klicken auf Öffnen
Select the script backup and click  Open.

2.
3
2.2) Uploading the script configuration via WEBconfig:
Öffnen Sie die Konfiguration des neuen WLAN-Controllers im Browser, wechseln in das Menü 
Open the configuration of the new WLAN Controller in a Web browser, go to the menu (Extras) →
LCOS-Menübaum → Dateimanagement → Konfigurations-Skript anwenden, wählen über die Schaltfläche Datei auswählen die Skript-Sicherung aus und klicken auf Upload starten. 
File management → Execute Configuration Script, select the script backup and click Start Upload. 
Image Added


2.3)
2.4
Reinitializing the SCEP Client:
2.
4
3.1) Reinitializing the SCEP Client via the CLI:
Connect to the WLAN Controller via the CLI and enter the following command:
do /Setup/Certificates/SCEP-Client/Reinit

2.
4
3.2) Reinitializing the SCEP Client via WEBconfig:
In WEBconfig go to the menu (Extras) → LCOS
-Menübaum
Menu Tree → Setup →
Zertifikate
Certificates → SCEP-Client → Reinit 
und klicken auf Ausführen.
and click Execute.
Image Added