WLC cert to avoid the security warning page

Hi guys,
I am doing some tests with installiing a 3rd party cert on a WLC to avoid the security warning page when trying to access the WLC through https, and I am following the following configuration example:
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml
I have followed the same precedures given in the above document, and I am using windows CA to sign the CSR just for a test, I could install the final .pem cert successfully onto the WLC however I am still getting the same warning page when I was trying to login to the WLC through https. I have checked in my certificate store and I have trusted the root CA which is the windows CA in this case.
I have also tried to access the WLC from the CA server (windows 2008 box) still getting the same warning message.
so what should I do in order to make this to work with windows CA? did I missed something in the configuration?
Thanks in advance for your time and help.
Andy

ok guys.... I was wrong last time... actually after double check again it was NOT working .... I think i just simply trusted the cert last time when i was using firefox....
I have tried a number of different things and double checked the places that mentioned previously in this thread however I could not pick up anything wrong in particular, although I know there must be something I have missed out.....
so this time I have also read through some other references on the web, and found the following:
http://www.my80211.com/home/2011/1/16/wlcgenerate-third-party-web-authentication-certificate-for-a.html
I think I did very similar config and only difference is that I am using unchained cert.
I have double checked the following:
on virtual interface configuration, I have ip address 1.1.1.1 and DNS host name as "wlc2112.mydomain.local"
from the controller GUI --> Security --> web auth --> certificate, under subject name, I have CN=wlc2112.mydomain.local, however under Issuer name, I have CN=mydomain, this is a bit different from the last screen shot in the above link. could this be a problem?
in windows 2003 server, with DNS server I have a field called "wlc2112" with IP address 1.1.1.1
as mentioned by Scott previously, I went to the mmc certificate snap in, and under trusted root certificate authorities, I have installed the WLC cert there and I could see it there as well.
now if I try to access the WLC GUI from here I am still getting the error message same as the one below:
http://www.vistaclues.com/the-security-certificate-presented-by-this-website-was-issues-for-a-different-website%E2%80%99s-address/
I then followed the instruction and continue to the website, and when I go file --> properties --> certificate, it actually shows the certificate is issued to 169.254.1.1 and issued by 169.254.1.1, with a red cross on the cert itself....... I have no idea where is this come from, so I just want to ask when I try to access the WLC GUI through a web browser, after I type in https://wlc-ip-address, how does the browser know / search for which certificate it needs to look into? I think in my case here it clearly points to the wrong certificate?
also on the server I went to http://127.0.0.1/certsrv and selected "download a CA certificate, certificate chain or CRL" and then "install this CA certificate chain", does this mean I acknowledge to trust the root CA by doing this?
I am not sure what I have missed out but it just does not work for some reason... is there any other places that I need to check/verify?
Sorry for the long writing but any comments would be highly appreciated.
Thanks in advance for your help.

Similar Messages

How do I get rid of the security warning for disc based Flash product

I have a project that use a program called Articulate to turn
powerpoint shows into a more rich flash product with audio, search
capacities, quiz etc. There are multiple sections from multiple
powerpoint files that generate a dozen or so flash files. The flash
files reside in an html shell to allow for navigation. The whole
thing is delivered on disc as a browser based training product.
The problem is that viewing flash from a disc results in a
security alert every time the viewer goes to a flash file. There is
an Articulate theme blog that suggests using a product called
server2go to make the disc function as a server to kinda fool
browsers on the local machine into thinking the disc is a web
server. My client wants the product to allow the users' default
browser. So far, although server2go is supposed to allow this, it
doesn't with the latest version of firefox (client's preferred
browser). I can only get it to work on a select machine or 2 in my
office with IE (server2go default) but it takes forever to launch.
I haven't gotten it to work on any of the client's machines. The
disc (auto launch) just freezes the machines.
Can anyone recommend a better server emulation product, or
tell me another solution to delivering a disc based flash product
without getting the security warning and without making the viewer
change settings on their machine to allow flash to play?
I understand security issues but this makes flash virtually
unusable for this application and I'm dead in the water if I can't
fix it.

Sorry, Ralph has already answered your question. If you need to get your security questions reset, you will have to contact iTunes Support:
ACCOUNT SECURITY CONTACT NUMBERS
Cheers,
GB

After i redeemed my itunes gift card, i can't purchase anything in the app store or itunes store. When i press purchase, the security questions page will pop up and after you answered all questions it will force restart my iphone. Can anyone help me?

After i redeemed my itunes gift card, i can't purchase anything in the app store or itunes store. When i press purchase, the security questions page will pop up and after you answered all questions it will force restart my iphone. Can anyone help me?

Hi godfest,
Welcome to the Support Communities!
The articles below will get you connected with the iTunes Store Support. These folks can review your account with you:
How to report an issue with your iTunes Store, App Store, Mac App Store, or iBookstore purchase
http://support.apple.com/kb/HT1933?viewlocale=en_US
iTunes Store & Mac App Store: Seeing your purchase history and order numbers
http://support.apple.com/kb/ht2727
Cheers,
- Judy

Create a form in Word where the user doesn't get the security warning

I created a form in Word that needs to be sent to external customers. It has some text boxes, check boxes and combo boxes. We are getting complaints from the users that they either don't see or can't deal with answering the question about enabling
the Active X controls. How do I create a form that they can use without having to deal with the security issue? Here's what the current code is behind the form.
Private Sub ComboBox1_Change()
End Sub
Private Sub ComboBox2_Change()
End Sub
Private Sub Document_Open()
With Me.ComboBox1
.AddItem ".edi"
.AddItem "EDI no extension"
.AddItem "Cxml/.xml"
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
With Me.ComboBox2
.AddItem ".edi"
.AddItem "EDI no extension"
.AddItem "Cxml/.xml"
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
With Me.ComboBox3
.AddItem ".edi"
.AddItem "EDI no extension"
.AddItem "Cxml/.xml"
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
With Me.ComboBox4
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
With Me.ComboBox5
.AddItem ".edi"
.AddItem "EDI no extension"
.AddItem "Cxml/.xml"
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
With Me.ComboBox6
.AddItem ".edi"
.AddItem "EDI no extension"
.AddItem "Cxml/.xml"
.AddItem ".csv"
.AddItem ".txt"
.AddItem ".xls"
.AddItem ".xlsx"
End With
End Sub
Private Sub CheckBox1_Click()
End Sub
Private Sub CheckBox2_Click()
End Sub
Private Sub CheckBox3_Click()
End Sub
Private Sub CheckBox4_Click()
End Sub
Private Sub CheckBox5_Click()
End Sub
Private Sub CheckBox6_Click()
End Sub
Private Sub CheckBox7_Click()
End Sub
Private Sub CheckBox8_Click()
End Sub
Private Sub CheckBox9_Click()
End Sub
Private Sub CheckBox10_Click()
End Sub
Private Sub ListBox1_Click()
Load
End Sub
Private Sub DTPicker21_CallbackKeyDown(ByVal KeyCode As Integer, ByVal Shift As Integer, ByVal CallbackField As String, CallbackDate As Date)
End Sub

Hi,
Did you get the security warning in Outlook or Word?
Could you please provide a screenshot about the warning to help us understand the problem?
In addition, please have a look at this link and check if it applies to the issue:
http://www.slipstick.com/how-to-outlook/disable-unsafe-hyperlink-warning-opening-attachments/
If this is the case, please try to use the following registry value to disable the security warning:
HKEY_CURRENT_USER\Software\Microsoft\Office\xx.0\Common\Security
DWORD: DisableHyperlinkWarning
Value: 1
xx.0 is the version of your Outlook. 12.0 is Outlook 2007; 14.0 is Outlook 2010; 15.0 is Outlook 2013.
Please let me know the result.
Regards,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

How do I disable the "Security Warning" - encrpted script message when I log in to a website using https ? If I cannot get the website owner to change it's code

''dupe of https://support.mozilla.org/en-US/questions/1027400 - locking''
Whenever I log onto a website via https, I get this message and am unable to have Firefox save my password for the website.
Another user asked this question and it was answered, however, the user was asking in the context of his own website where he was able to change the code.
I am unable to change the code for this website but would like to disable this message and have Firefox remember my password for the user id I type in.
Whenever I log onto a website via https (including my website), I get this message:
Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party. Are you sure you want to continue sending this information? This is followed below with two boxes, "continue" and "cancel".
In order to connect with the website, I must click on "continue" each time I log onto the website. HOW do I permanently DISABLE this message?
Chosen solution
Firefox gives that error because the page is on HTTPS but your form action is HTTP:
<form action="http://eclipse69forum.com/index.php?app=core&module=global&section=login&do=process" method="post" id="login">
Can you change that to HTTPS?

There is a disconnect here: if the form is being submitted securely, then you would not get that message. So although you may be looking at an HTTPS address in the address bar, Firefox is warning you that your username and password are going to an HTTP address and being transmitted in the clear rather than being protected.
That's definitely not the normal way to set up a login page. Do you want to give the URL of the problem login page to get specific comments? Without knowing more, it sounds as though it isn't designed for secure logins and you may be wasting your time accessing their login form using HTTPS.
Anyway, to answer your question, I don't think there is a way to disable that warning.

Change language on the security warning popup when using signed applets

Hi
Today when we use a signed applet the user get a security warning popup box where the langauge is English.
Is it possible to change the language to other that English and if possible how can this be done ?
Thanks in Advance,
Henrik Rasmussen
Denmark

The Microsoft one is especially annoying because they should know better than to submit from secure to insecure.
Let's say you are currently logged in to a Microsoft account and you click Sign in on MSDN. The site redirects to login.live.com, which recognizes that you are logged in, and generates a page with a hidden form and submits it back to MSDN using a script. This is where the problem is, because the hidden form action URL is not secure, yet it is on a secure page. (See Screen shots)
The workaround (hack, whatever) is to modify the form to a secure address before it is submitted. How can you do that? Since it is impractical to do by hand, you can use an add-on.
In an earlier thread, user thx1200 posted a link to a userscript that fixes this issue on login.live.com. The userscripts''.''org site has seemingly died, but there is a copy on a mirror of that site.
* Earlier thread (long): [https://support.mozilla.org/questions/964250 How do disable this Warning? Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection]
* You need Greasemonkey to run user scripts: https://addons.mozilla.org/firefox/addon/greasemonkey/
* User script install page: [http://userscripts-mirror.org/scripts/show/173384.html Fix security warning for Microsoft Live login]

How can I fix the security warning I keep getting regarding unencrypted connections?

When I surf the internet, I get a security warning saying that I am sending information over an unencrypted connection that can be viewed by a third party. I would like to resolved this.

The settings for the warning messages have been removed from the user interface (Bug 513166).
You need to change the related security.warn_* prefs directly on the about:config page. 
Filter: security.warn
To open the about:config page, type about:config in the location (address) bar and press the "Enter" key, just like you type the url of a website to open a website. 
If you see a warning then you can confirm that you want to access that page. 
*Use the Filter bar at to top of the about:config page to locate a preference more easily.
*Preferences that have been modified show as bold (user set).
*Preferences can be reset to the default via the right-click context menu if they are user set
*Preferences can be changed via the right-click context menu: Modify (String or Integer) or Toggle (Boolean)

Removing the "Security Warning" dialogue box on default when a PDF is opened

Hey
I have created a pdf document with a specific data written using iText Libraries. I have actually created a beacon that generates a notification sent to the owner's email when the pdf is opened.
The code is under OpenAction. The problem I am facing is that as I open the document, a dialogue box is opened saying "Security Warning" The document is trying to connect to : URL. How do I get rid of this dialogue box. ? I don't want this dialogue box to appear and allow the connection by default. I have tried playing with the Trust Manager - but that doesn't seem to be the solution, as am trying to execute my PDF document at a remote machine.

There was a lot of media fuss years back when it was found out that PDF files could "phone home", i.e. do what you want to do. So Adobe put this warning in. It wouldn't be much good as a warning if the creator of a PDF could choose to turn it off!
Document creators like to track people opening documents. Privacy advocates consider this a breach of privacy. The latter group shouts louder. http://en.wikipedia.org/wiki/Phoning_home

My website was hacked, I made a new one and placed it on a new server. How about the red warning page on firefox for returning visitors?

Hi I have a problem. My businesswebsite www.steunkousgemak.nl was hacked and the hacker placed mallware on it. My link on google had a warning and when you wanted to visit my site on firefox there was a red warning page. I made a new website so it's deffinately clean, moved it to a different server and have a new hostingpackage. Now I am wondering if firefox automaticly saved the warning for all visitors that where on my website when it was infected, and so that they still see the warning when they want to visit my site now? if yes, how can I solve this?thank you a lot for your answer!regards Steven

Try clearing your browser cache.
Tools > Clear Recent History... - hit Details and make sure only Cache is selected, then select Everything and hit the Clear Now button.

How can I avoid the plugin check page?

Every time I open Firefox now, I get a second tab taking me to the plugin checker page. I updated all the vulnerable ones, and I just don't want to see the thing every time I open firefox! Can I disable this annoying feature?

I uninstalled Viewpoint Media Player (and the AOL IM client "AIM", since apparently that's what forced Viewpoint Media Player on to my system.) Viewpoint Media Player is responsible for the plugin called "MetaStream 3 Plugin r4", and I believe this plugin is triggering Firefox to open the plugincheck page. It is not enough to disable the plugin, it must be uninstalled. For me, after uninstalling Viewpoint Media Player, the "plugincheck always opening" problem then went away.
I see, however, that you do not have this plugin ("MetaStream") in your plugins list. So it may be that there is some other plugin of yours that is causing this tab to pop up. Go to Tools->Addons->Plugins(tab), and look in the list for any plugins with a red warning icon. If there are any, this is probably the plugin causing the problem.

Why is the security warning messages menu deleted on firefox 4?

The warning messages option under security menu is missing on ff4. Is there an easier way to get it back instead of using "about:config"?

Not that I have seen.

Everytime I log into a particular site (the secure login page of my bank) it says that the Silverlight plug-in has crashed, yet it's up to date

I have checked that the plug-in is up to date but it still brings the error up at the top of the page.
I am using a Mac, running Yosemite (although this happened before the update to Yosemite)

Thanks very much!
It worked a treat!

How to avoid the Security Constraint framework's user validating.

The problem is I have set up a security constraint in web.xml. If I link to that mapping tomcat will throw a window for user to input the username and password.
I expect that i could set a URL to redirect to this mapping which is constrainted by web.xml and jump over the step of input window.
I prefer the way like logon FTP, setting the URL like this: ftp://username:[email protected] (of course the way http://username:password@host:port/file was fail) or anyother ways to implement that.
thanks!!

in your form tag specify method=post, that'll hide the values from being displayed in the url
eg:
<form action="someAction" method="post">

Why can't i get the offer of a yahoo sign in security seal .. and a security warning from firefox

i have an ibook g4 running osx 10.4.11
5mar my yahoo sign in security seal did not show from either internet cafe or dial up .. 6mar i reinstalled osx 10.4.11
after reinstall i did not get the offer to create a sign in security seal from any internet cafe or dial up
anyone else gets the offer on the sign in page
when using firefox i also get the following ..
"security warning .. you have requested an encrypted page that contains some unencrypted information .. information that you see or enter on this page could easily be seen by a third party"
why do i not get the sign in security seal offer everyone else does
why do i get the security warning no one else does

Welcome to the Apple Community.
There are reports of TV Shows missing from users screens, initially it looked like this might be an issue in the UK only, but it may well be more widespread. It appears to be an issue that can't be fixed by the user, you will need to wait until this is resolved by Apple.

How to disable security warning "Your current security settings put your computer at risk"

Hi,
I wonder if able to disable the security warning bar at the bottom of the IE window. I enabled the ActiveX control and plug-ins in the IE Option settings, this caused the security warning "Your current security settings put
your computer at risk" pop up whenever load the pages. Is there a way can turn off this warning?
Thanks a lot for helping!

That is not an option for Koreans...
In Korea, most of commercial, financial, or governmental operations need to be done on the Internet. In early 2000's, IE could not support high security outside US due to US laws (that was stupid, but happened) , so Korean sites developed cryptography ActiveX
controls to circumvent it. Korean government made laws to force all sites to use those kind of ActiveX controls at that time.
A decade has passed, and now the stupid US law has been repealed. But the cryptography ActiveX industry has become so strong (probably bribing the high officers in the government), that all Korean sites are still using those kind of ActiveX controls. And
you know, they require Windows and IE. Recently some sites started to support other browsers, but still the majority requires IE and ActiveX.
So, if you live in Korea, you have no choice but to use IE on Windows to get things done, and almost all sites popup ActiveX installation dialogues constantly. If you do not change the security settings, when you approve the installation, the whole site
refreshes. That is time-consuming and frustrating.
To keep my mental heath, I deal with all Korean sites in a virtual machine. To avoid the refresh problem, I have changed the security settings from "prompt" to "enable". The "Your security is at risk..." banner at the bottom
of IE is surely annoying. I hope Microsoft let us either remove that banner or remove the support of ActiveX controls altogether.

WLC cert to avoid the security warning page

Similar Messages

Maybe you are looking for