topic Re: Old Ruckus PKI Signed in Access Points - Indoor and Outdoor

Old Ruckus PKI Signed

brian_hoyt_6612 — Thu, 11 Aug 2016 17:52:20 GMT

I just upgraded to 9.13.0.0 build 232 so I could install R510 access points. I am also installing R710 AP as upgrades. I noticed the R710 / R510 have a certificate status of New Ruckus PKI Signed but the R700 I have show Old Ruckus PKI Signed. Is there something I need to do to upgrade PKI?

Re: Old Ruckus PKI Signed

jay_files — Thu, 11 Aug 2016 18:06:17 GMT

Yes, you can go to Configure > Certificate > Advanced Options > Import Ruckus PKI Certificate Package, enter the number of APs who need new certs, and click the "click here" link. (It's kind of hard to see, but it's there.)

This will create a .req file, that can be sent to Ruckus using https://certrenewal.ruckuswireless.com, and Ruckus will send you another file, that can be used (in the same section in the ZD UI) to import new certs for older APs.

Instructions are also in the ZD 9.13 User Guide, and the Online Help. But this is a short version. Hope it helps!

Re: Old Ruckus PKI Signed

charles_sprick1 — Thu, 01 Aug 2019 17:47:19 GMT

I suspect that tool has gone unmaintained or is broken in some way.

Tried this multiple times to get one old AP on a ZD updated and whether I selected "1" or "0", the file returned by Ruckus always results in the error: "Error! Some AP Ruckus PKI certificates are missing from the package. Please request a new package."

Just a heads-up if there's anyone on here that maintains that tool...

Re: Old Ruckus PKI Signed

Piet — Wed, 31 Aug 2022 19:03:03 GMT

I'm also getting Old Ruckus PKI certificates warnings even after I updated to new firmware.

I'm worried about the significance of this warning.

Re: Old Ruckus PKI Signed

vasanth_edward — Thu, 01 Sep 2022 08:49:07 GMT

Hi @charles_sprick1,

Would request you to open a case with us for AP cert renewal.

Regards,

Vasanth Edward

Re: Old Ruckus PKI Signed

Piet — Sat, 03 Sep 2022 07:31:31 GMT

I'm just a retired linux/networking hacker messing around.

Just learning this beautiful system. Don't want to be a supported customer.

Is there an expiration date coming up when the Old Certs are going to expire and cause

problems. If so When?

Re: Old Ruckus PKI Signed

Piet — Sat, 03 Sep 2022 07:36:45 GMT

I'm just a retired LinuxKernel Engineer messing around.

Not a supported customer.

Know what the consequences are of these old KEYS?

Is bad stuff going to happen some day in the future like

the browser problems I'm getting with old Ruckus certificates.

Are these OLD R700s going to turn to bricks before my NEWer R700s?