# Trustpoint Support During Catalyst 9800-CL Maintenance Catalyst 9800-CL is a cloud-based wireless controller that provides various features for managing wireless networks. One of the critical aspects of maintaining this system is ensuring the proper handling of trustpoints, which are essential for secure communications. ## Trustpoint Overview A trustpoint is a configuration object in Cisco devices that defines a certificate authority (CA) and its associated certificates. Trustpoints are crucial for establishing secure connections using protocols like HTTPS, SSH, and others. ## Importance of Trustpoints in Maintenance When performing maintenance on the Catalyst 9800-CL, it is vital to ensure that trustpoints are correctly configured and functioning. This ensures that all communications remain secure and that the integrity of the network is maintained. ### Steps for Managing Trustpoints 1. **Verify Existing Trustpoints**: Before making any changes, check the current trustpoints configured on the device. ``` show crypto trustpoint ``` 2. **Add a New Trustpoint**: If a new certificate authority is required, you can add a new trustpoint using the following command: ``` crypto trustpoint <name> ``` 3. **Import Certificates**: Import the necessary certificates into the trustpoint to establish trust with the CA. ``` import <certificate> ``` 4. **Bind Trustpoints to Interfaces**: Ensure that the trustpoints are correctly bound to the necessary interfaces for secure communication. 5. **Test Connectivity**: After making changes, test the connectivity to ensure that the trustpoints are functioning as expected. ``` ping <destination> ``` ## Conclusion Proper management of trustpoints during the maintenance of the Catalyst 9800-CL is essential for maintaining secure communications within the network. By following the outlined steps, administrators can ensure that their wireless controller remains secure and reliable.
When relocating the Catalyst 9800-CL to a different environment, simply applying the existing configuration did not allow for HTTPS (GUI) or AP joins. Therefore, I am leaving the following notes. I will rewrite them neatly when I have time. Cat9800-CL Maintenance Procedure: Recovery of HTTPS (GUI) / AP Join (CAPWAP-DTLS) (When SSC is Missing) 1. Purpose To recover the following issues that are likely to occur after RMA/migration/configuration replication using only CLI: ...