Server certificate installation on ClearPass

You can generate and install the certificate in ClearPass for HTTPS service. Copy the root certificate or the CA (Certificate authority) certificate of ClearPass into the switch for successful device fingerprinting operation.

The following commands are used to copy CA certificate on ClearPass to the switch:

  1. To create TA certificate.

    crypto pki ta-profile <TA-PROFILE-NAME>

  2. To copy CA certificate to the TA profile.

    copy tftp ta-certificate <TA-PROFILE-NAME> <TFTP-IP-ADDRESS> <TA-CERTIFICATE-NAME>