Create backups of the certificates

To restore the CA or RA, the relevant root certificates with private keys will be required as generated automatically when the WLC was started. Furthermore the following files with information on issued device certificates should also be backed up. To ensure that this confidential information remains protected even when exported from the device, it is initially stored to a password-protected PCKS12 container.

WEBconfig

1. Open the configuration of the WLC in WEBconfig and go to Extras > LCOS menu tree > Setup > Certificates > SCEP-CA > CA-certificates.
2. Select the command Create PKCS12 backup files and enter the passphrase for the PKCS12 container as the additional argument.

This command backs up the certificates and private keys to the PKCS12 files and these can then be downloaded from the device.

LANconfig

1. Highlight the WLC in the device view section and in the menu Device > Configuration management select the item Save certificate as file.
2. Set the Certificate type to PKCS12 container and click Save.