Refer to the exhibit, which shows the settings on the company's MCs. You have deployed about 100 new HPE Aruba Networking 335 APs. What is required for the APs to become managed?

Question

Exhibit

Options

• AInstalling CA-signed certificates on the APs
• BApproving the APs as authorized APs on the AP whitelist
• CInstalling self-signed certificates on the APs
• DConfiguring a PAPI key that matches on the APs and MCs

• A
  3% (1)
• B
  89% (34)
• C
  3% (1)
• D
  5% (2)

Explanation

The scenario involves an AOS-8 Mobility Controller (MC) with Control Plane Security (CPSec) enabled and auto certificate provisioning disabled. CPSec is a feature that secures the control plane communication between the MC and APs using certificates. When CPSec is enabled, APs must be authorized and trusted by the MC to become managed. CPSec Enabled, Auto Cert Provisioning Disabled: When CPSec is enabled, APs must have a valid certificate to establish a secure control plane connection with the MC. If auto certificate provisioning is disabled (as shown in the exhibit), the MC does not automatically provision certificates to the APs. Instead, the APs must already have a factory-installed certificate (or a manually installed certificate), and the MC must trust the AP's certificate by having the issuing CA in its trust list. Additionally, the AP must be on the MC's AP whitelist to be authorized. AP Whitelist: The AP whitelist is a list of authorized APs maintained on the MC (or Mobility Master, MM, if present). For an AP to become managed, its MAC address must be in the whitelist, especially when CPSec is enabled and auto provisioning is disabled. This ensures that only authorized APs can connect to the MC.

No community discussion yet for this question.