11-17-2020 06:28 AM
Anyoone know if I can update the root certificate on standalone zf7321 as "certificate verificaton status" shows PASSED so I cant access the CSR part for the cert replacement process.
Don't even understand why it show PASSED in the first place but I guess the chain checks out.
11-18-2020 03:06 AM
11-18-2020 05:27 AM
If AP is in standalone mode, you can update the certificate using standalone AP's GUI.
If the issuer contains the string "RuckusPKI", it means the AP has the new certificate,
otherwise, it has the old certificate.
rkscli: get rpki-cert issuer
11-19-2020 02:09 PM
Thing is that this is an old EOL ZF7321 and does´nt support CLI "get rpki-cert issuer" nor the option of Maintenance::Upgrade local-ly certificate, only file or firmware. But then again I´m unable to get to the CSR because Certificate verification always shows PASSED and thus unable to get the link to start it according to instructions.
Just double checking if I´d missed something but it seems it´s been deemed end of every thing after all it´s only single radio.
11-20-2020 04:10 AM
What is the current firmware on ZD7321? If it is lower than 9.x, you have to upgrade it to 100.x and then it will give you the option update the cert from GUI.
If GUI is also not giving you option to upgrade firmware, use AP CLI and FTP/TFTP to upgrade the firmware.
Download the 100.x standalone version from the below link.
fw set control zf7321_18.104.22.168.432.Bl7 (This is the file name of the firmware in FTP server).
fw set proto ftp
fw set host xxx.xxx.xxx.xxx (Where x.x.x.x is IP address of the FTP server)
fw set user xxxx (Where xxx is user name of the FTP server)
fw set password xxxx (Where xxx is password of the FTP server)
fw set proto tftp
fw set host <server ip>
fw set control <filename> (path/Name of the image file, eg. ap-arm-qca-wsg/rcks_fw.bl7)
Once above is done, AP should give you option for cert update using GUI.