300-425 Question 215
Select 3You are tasked with configuring certificate-based authentication for a Cisco wireless network. During the process of provisioning a certificate on the wireless LAN controller (WLC), which of the following steps must be performed to ensure a successful implementation?
- A
Generate a CSR (Certificate Signing Request) on the WLC.
- B
Upload the signed certificate to the WLC after receiving it from the Certificate Authority (CA).
- C
Manually assign the certificate to each access point in the network.
- D
Ensure the WLC has the CA's root certificate installed.
- E
Enable HTTPS on the WLC for certificate validation.
Show answer and explanation
Correct answers: A, B, D
Explanation
Certificate provisioning on the Cisco WLC involves generating a CSR, sending it to a CA for signing, and uploading the signed certificate back to the WLC. Additionally, the WLC must have the CA's root certificate installed to validate the authenticity of the signed certificate. These steps ensure secure communication and authentication within the wireless network.
- A. Correct.
Correct: Generating a CSR on the WLC is the first step in the certificate provisioning process. This request is sent to a Certificate Authority (CA) to generate a signed certificate.
- B. Correct.
Correct: After receiving the signed certificate from the CA, it must be uploaded to the WLC to complete the provisioning process.
- C. Incorrect.
Incorrect: Certificates are not manually assigned to each access point. Instead, access points inherit the necessary security settings, including certificates, from the WLC.
- D. Correct.
Correct: The root certificate of the CA must be installed on the WLC to establish a chain of trust for the signed certificate.
- E. Incorrect.
Incorrect: While enabling HTTPS is a good practice for secure management, it is not directly required for provisioning the certificate.