• Clearpass Policy Manager

If you have an Aruba account, they sent out a notice.. Below is a portion of the email I received.

SUMMARY

After adjusting our authentication redirect page on our ClearPass server, all guests are accepting the new cert and are joining our guest network. By the way, contacting Aruba support engineers directly is a great first step if you run into this same problem.

The ArubaOS operating system loaded on all Aruba Mobility Controllers and Mobility Access Switches contains a pre-loaded digital certificate with the name “securelogin.arubanetworks.com”. As is stated in the user guide, and multiple customer advisories and Airheads Community postings, the default certificate is not intended for production deployment since every Aruba controller or switch contains the same certificate. Aruba has always recommended customers to replace this default certificate with a certificate issued by a public Certificate Authority or by an internal (PKI) Certificate Authority.

/windows-7-x64-key-generator.html. While a majority of security conscious customers have taken our advice seriously and replaced the default certificate, Aruba is aware that there are still other customers that are using the default certificate in the production networks typically for Administrative WebUI, securing the Captive Portal login screen in guest networks and for dot1x authentication with EAP termination enable.

1. 6.6 ClearPass Policy Manager User Guide, HTML version. Updated July 6, 2017 for new 6.6.7 features. 7/6/2017: 6.6 Clearpass Policy Manager User Guide HTML: 6.6 ClearPass Policy Manager User Guide, HTML version. Release Date April 22, 2016.
2. Airheads Community. Community Home Discuss Technology Security i installed clearpass PM and after changing. To generate a support key and a recovery.
3. Powerconnect W-ClearPass Hardware Appliances Software pdf manual download. Also for: Networking w-clearpass policy manager 6.0. To generate the support key, select option 2 (or 3, if you want to generate a password recovery key, as well). Once the password recovery key is generated, email the key to Dell technical support.
4. ClearPass: Credential Caching and Replay. To enable single sign-on into some legacy applications it may be necessary to provide them with the actual password. While such approach inevitably increases security risk, at times this may be a necessary evil in order to integrate applications with CAS.
5. Jul 29, 2013  ClearPass Policy Manager Guest Onboard AirGroup Insight Onguard MACTrac WorkSpace CPPM BYOD: Remarks: 6.2 ClearPass Guest User Guide. Release date July 25, 2013. Show Date: 7/29/2013 4:33:01 PM: Show Till: 7/29/2018 4:33:01 PM.

This default certificate (securelogin.arubanetworks.com) was issued by a GeoTrust certificate authority (CA) that is trusted by most browsers and operating systems. However, in light of the following articles, http://www.itnews.com.au/news/aruba-products-contain-compromised-https-certificate-436511 and http://www.darkreading.com/vulnerabilities---threats/cryptographic-key-reuse-remains-widespread-in-embedded-products/d/d-id/1326826, securelogin.arubanetworks.com has been revoked

Clearpass Policy Manager