15
CRYPTOGRAPHY COMMANDS
A digital certificate is a form of electronic identification for computers.
The WX requires digital certificates to authenticate its communications to
3WXM and Web Manager, to WebAAA clients, and to Extensible
Authentication Protocol (EAP) clients for which the WX performs all EAP
processing. Certificates can be generated on the WX or obtained from a
certificate authority (CA). Keys contained within the certificates allow the
WX, its servers, and its wireless clients to exchange information secured
by encryption.
If the switch does not already have certificates, MSS automatically
generates the missing ones the first time you boot using MSS Version 4.2
or later. You do not need to install certificates unless you want to replace
the ones automatically generated by MSS. (For more information, see the
“Certificates Automatically Generated by MSS” section in the “Managing
Keys and Certificates” chapter of the Wireless LAN Switch and Controller
Configuration Guide.)
Before installing a new certificate, verify with the display timedate and
display timezone commands that the WX is set to the correct date, time,
and time zone. Otherwise, certificates might not be installed correctly.