Smartzone certifcate error (expires 2034) suddenly untrusted - how to fix?

[michael_helm]

I wonder if anyone can help.  After running for several years with no problems we are now getting errors reported when users (Iphone mainly) connect to the public Wi-Fi and should be prompted to login.  

Instead, they are getting a certificate error relating to the scg.ruckuswireless.com certificate.  This isn't due to expire until 2034, and has been in place since 2019, however, it's now appearing as untrusted (see screenshot below).  

We haven't deployed a 3rd party certificate (which seems to cause some issues from the articles on the knowledgebase) - how can we resolve this, what might have changed recently to cause this issue?

[syamantakomer]

Hi Michael,

This is expected behavior.

Device comes with a default certificate which is not CA signed.

If you want to avoid the security warning and make it secure, please generate a CSR and get it signed by any public CA.

Once you get the cert, upload it to controller and change the service to certificate mapping.

[Liong]

Hi Syamantak,

I am experiencing the same issue as well.

Question:
When generating the CSR, what should we put under the common name field? Is it " scg.ruckuswireless.com"?

Thanks!

[nilesh_kahar]

Hi, I am having wild card certificate which I can use for "AP Portal". Do I have have to make any DNS entries like scg.mydomain.com or something else to make it work?

[nilesh_kahar]

Hi, I am having wild card certificate which I can use for "AP Portal". Do I have have to make any DNS entries like scg.mydomain.com or something else to make it work?