Cisco 2100 Series Configuration Manual page 392

Autonomous Access Points Converted to Lightweight Mode
To add the CA certificate into the controller's CA certificate database, hover your cursor over the blue
Step 7
drop-down arrow for the certificate type and choose Add.
Step 8 To provision the LSC on the access point, click the AP Provisioning tab and check the Enable AP
Provisioning check box.
Step 9 To add access points to the provision list, enter the access point MAC address in the AP Ethernet MAC
Addresses field and click Add.
Note
Note
Click Apply to commit your changes.
Step 10
Using the CLI to Configure LSC
Using the controller CLI, follow these steps to enable the use of LSC on the controller.
To enable LSC on the system, enter this command:
Step 1
config certificate lsc {enable | disable}
To configure the URL to the CA server, enter this command:
Step 2
config certificate lsc ca-server http://url:port/path
where url can be either a domain name or IP address.
Note
To add the LSC CA certificate into the controller's CA certificate database, enter this command:
Step 3
config certificate lsc ca-cert {add | delete}
To configure the parameters for the device certificate, enter this command:
Step 4
config certificate lsc subject-params country state city orgn dept email
Note
To configure a key size, enter this command:
Step 5
config certificate lsc other-params keysize
The keysize is a value from 384 to 2048 (in bits), and the default value is 2048.
Cisco Wireless LAN Controller Configuration Guide
7-20
To remove an access point from the provision list, hover your cursor over the blue drop-down
arrow for the access point and choose Remove.
If you configure an access point provision list, only the access points in the provision list are
provisioned when you enable AP provisioning. If you do not configure an access point provision
list, all access points with a MIC or SSC certificate that join the controller are LSC provisioned.
You can configure only one CA server. To configure a different CA server, delete the configured
CA server using the config certificate lsc ca-server delete command; then configure a different
CA server.
The common name (CN) is generated automatically on the access point using the current
MIC/SSC format Cxxxx-MacAddr, where xxxx is the product number.
Chapter 7 Controlling Lightweight Access Points
OL-17037-01