Cisco WLC WebAuth Certificate Installation

Step 1 - Export cert from Windows Server using Certificates MMC snap-in

Step 2 - Extract the Private Key and the Cert

openssl.exe pkcs12 -in certificate-exported.pfx -nokeys -out certs.pem
openssl.exe pkcs12 -in certificate-exported.pfx -nocerts -out mykey.pem

Step 3 — Chaining the Certificates

a) Copy and paste the contents into a new file as follows to include the intermediate and root certs:
----BEGIN CERTIFICATE ----
‘Server certificate ’
---- END CERTIFICATE ----
---- BEGIN CERTIFICATE ----
‘Intermediate CA certificate’
---- END CERTIFICATE ----
---- BEGIN CERTIFICATE ----
‘Root CA certificate’
---- END CERTIFICATE ----

b) Save the file as AII-certs.pem

c) Open OpenSSL (via Command Line) and execute the following commands:

pkcs12 -export -in All-certs.pem -inkey mykey.pem -out All-certs.p12 -clcerts -passin pass:check123 -passout pass:check123

pkcs12 -in All-certs.p12 -out final.pem -passin pass:check123 -passout pass:check123

Step 4 - Upload the final-cert.pem to the WLC using TFTP