Certificate Management

RUCKUS One provides certificate management functions that help enhance security, simplify certificate administration, and ensure compliance with industry standards.

Feature Overview

Certificate Management provides a centralized platform for creating, issuing, managing, and monitoring digital certificates across your organization. Through the Certificate Management service, administrators can create certificate instances and manage certificate authorities, certificate templates, device certificates, and server and client certificates from a single interface.

  • Certificate Authority (CA) Management: Create and manage root and intermediate certificate authorities (CAs) used to issue and sign certificates. You can also upload existing certificate authorities for use within your tenant.
  • Certificate Template Management: Create reusable certificate templates to standardize certificate issuance. Certificate templates define certificate properties such as certificate strength, cryptographic algorithms, validity periods, organization information, identity groups, adaptive policy sets, Chromebook enrollment settings, and Simple Certificate Enrollment Protocol (SCEP) settings.
  • Device Certificate Management: Generate and manage device certificates issued from certificate templates. You can view certificate details, monitor certificate usage, download certificate files, revoke or unrevoke certificates, and delete unused certificates.
  • Server and Client Certificate Management: Generate server and client certificates by using an existing certificate authority, generate certificates from Certificate Signing Requests (CSRs), or upload existing certificates. You can search, filter, download, renew, revoke, and manage certificates from a centralized inventory. Server and client certificates are identified by their Extended Key Usage (EKU) values.
  • Enterprise Network (802.1X) Authentication: Support certificate-based authentication by validating devices and services against trusted certificate authorities.
  • Device Enrollment: Simplify device onboarding by supporting Chromebook enrollment and SCEP-based certificate enrollment workflows.
Certificate Usage Guidelines: The following certificate types can be used for Remote Authentication Dial-In User Service (RADIUS) over TLS (RadSec) deployments:
  • Client Certificate: Used by RUCKUS One to authenticate to remote AAA servers during outbound RadSec communications.
  • Server Certificate: Used by RUCKUS One to receive inbound RadSec communications, such as Change of Authorization (CoA) requests.
  • Trusted CA: Used to validate certificates presented by remote AAA servers during TLS authentication.

Requirements

This feature has no special hardware or software requirements for feature enablement or usage.

Considerations

You can add up to five certificate templates to an Enterprise AAA (802.1X) WLAN.

Best Practices

This feature has no special recommendations for feature enablement or usage.

Prerequisites

This feature has no prerequisites to feature enablement or usage.