HTTP/HTTPS Service Configuration and Generation of Secure Socket Layer (SSL) Certificate on WAP551 and WAP561 Access Points

Available Languages

Download Options

PDF (680.8 KB)
View with Adobe Reader on a variety of devices
ePub (721.3 KB)
View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle) (282.7 KB)
View on Kindle device or Kindle app on multiple devices

Updated:August 18, 2017

Document ID:SMB4297

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

HTTP/HTTPS Service Configuration and Generation of Secure Socket Layer (SSL) Certificate on WAP551 and WAP561 Access Points

Objective

The access point can be managed through both HTTP and HTTP Secure (HTTPS) connections when the HTTP/HTTPS servers are configured. Hyper Text Transfer Protocol Secure (HTTPS) is a more secure transfer protocol than HTTP. An Access Point must have a valid SSL certificate to use HTTPS service. A SSL certificate is a digitally signed certificate by a certificate authority that allows the web browser to have a secure encrypted communication with the web server.

This article explains how to configure the HTTP/HTTPS Service and how to create a Secure Socket Layer (SSL) certificate on the WAP551 and WAP561 access points.

Applicable Devices

• WAP551
• WAP561

Software Version

• 1.1.0.4

Configuration of HTTP/HTTPS Service

Step 1. Log in to the web configuration utility and choose Administration > HTTP/HTTPS Service. The HTTP/HTTPS Service page opens:

Step 2. Enter the maximum number of web sessions in the Maximum Sessions field. This signifies the maximum number of user that can be logged in to the web configuration utility.

Step 3. In the Session Timeout field, enter the maximum amount of time that an inactive user can remain logged on to the AP web configuration utility.

Step 4. Check the Enable check box of the HTTP Server to enable web access via HTTP. The HTTP server is enabled by default.

Note: If the HTTP Server is disabled, any current connections that use HTTP are disconnected.

Step 5. In the HTTP Port field, enter the port number to use for HTTP connections. Port number 80 is commonly used for HTTP connections.

Step 6. (Optional) If you wish to redirect management HTTP access attempts on the HTTP port to the HTTPS port check the Redirect HTTP to HTTPS check box. This field is available to enable only when HTTP access is disabled.

Step 7. Check the Enable check box of the HTTPS Server to enable web access via HTTPS. The HTTPS server is enabled by default.

Note: If the HTTPS Server is disabled, any current connections that use HTTPS are disconnected.

Step 8. Enter the port number to use for HTTPS connections in the HTTPS Port field. The default port number 443 is typically used with HTTPS.

Step 9. Click Save to save the settings.

Configuration of SSL Certificates

You can download an SSL Certificate via an HTTP/HTTPS web browser or from a TFTP server, use the access point to generate an SSL certificate, or upload an SSL Certificate from your computer. In this section, all the different methods to install an SSL certificate are described.

Generation of an SSL Certificate

The new HTTP SSL certificate for the secure web server should be generated after the Access Point (AP) has acquired an IP address so that the common name for the certificate matches the IP address of the AP. Generation of a new SSL certificate restarts the secure web server. The secure connection does not work until the new certificate is accepted on the browser.

Step 1. Click Generate to generate a new SSL certificate. A confirmation window appears.

Step 2. Click OK to continue with the generation of the SSL certificate. After the certificate has been generated, the SSL Certificate File Status area displays the following information:

• Certificate File Present — Indicates whether the HTTP SSL certificate file is present or not.

• Certificate Expiration Date — Displays the expiration date of the current HTTP SSL certificate.

• Certificate Issuer Common Name — Displays the common name of the current certificate issuer.

Download the SSL Certificate

The steps below describe how to download the SSL certificate (a .pem file) from device to the PC as a backup.

Step 1. Click the radio button that corresponds with the desired download method under the Download SSL Certificate area.

• HTTP/HTTPS — Allows SSL Certificate to be downloaded from a web server. Skip to Step 4 if you choose HTTP/HTTPS.

• TFTP — Allows SSL Certificate to be downloaded from a TFTP server. If you choose this, the File Name and TFTP Server IPv4 Address fields appear.

Step 2. If you chose TFTP in Step 1, enter the file name in the File Name field. This is a certificate type file with a .pem extension.

Step 3. If you chose TFTP in Step 1, enter the IP address of the TFTP server in the TFTP Server IPv4 Address field.

Step 4. Click Download to download the certificate file. A confirmation window appears.

Step 5. Click OK to continue with the download.

Upload the SSL Certificate

Step 1. Click either the HTTP/HTTPS or the TFTP radio button to choose desired upload method under the Upload SSL Certificate area.

• HTTP/HTTPS — This allows certificate to be uploaded with a web server. If you chose HTTP/HTTPS, complete Step 2 and then skip Step 3.

• TFTP — This allows SSL Certificate to be uploaded through a TFTP server. If you choose this the File Name and TFTP Server IPv4 Address fields appear. Skip Step 2 and perform Step 3.