300-430 Question 216
Select 3You are configuring a Cisco wireless LAN controller (WLC) for secure communication with Access Points (APs). To ensure certificate-based authentication between the WLC and APs, which steps are required to provision a valid certificate on the controller?
- A
Generate a Certificate Signing Request (CSR) on the controller.
- B
Upload the signed certificate and private key to the WLC.
- C
Enable HTTPS communication on the WLC to activate the certificate.
- D
Install the CA certificate chain on the WLC.
- E
Manually distribute the same certificate to all APs.
Show answer and explanation
Correct answers: A, B, D
Explanation
To provision a certificate on a Cisco WLC, you must first generate a CSR, which is sent to a Certificate Authority (CA) for signing. Once the signed certificate is received, it, along with the private key, must be uploaded to the WLC. Additionally, the CA certificate chain must be installed to allow the WLC to validate the signed certificate. This process ensures secure certificate-based authentication between the WLC and APs.
- A. Correct.
Correct: Generating a CSR is a required first step to obtain a signed certificate from a Certificate Authority (CA).
- B. Correct.
Correct: The signed certificate and private key must be uploaded to the WLC to complete the certificate provisioning process.
- C. Incorrect.
Incorrect: Enabling HTTPS is not a requirement for certificate provisioning but is a separate step for securing management access to the WLC.
- D. Correct.
Correct: Installing the CA certificate chain ensures the WLC can validate the authenticity of the signed certificate.
- E. Incorrect.
Incorrect: Certificates do not need to be manually distributed to APs. The APs obtain their certificates automatically when they join the WLC.