Authentication Certificate Renewal

Zyxel_Claudia

Addressing Certificate Expiration

Cloud-managed APs use a specific 802.1X certificate for WPA Enterprise authentication. Many of these certificates were set to expire in February 2026, which would cause authentication failures for clients.

Proactive Provisioning

To prevent disruption, NCC proactively provisions new certificates to all online APs starting January 21, 2026. Offline APs will receive the update as soon as they reconnect.

Verification and Scope

• Verification: Administrators can verify the renewal using the CLI command: show ca category local name dot1x-cert.pem format text. The validity should now extend to 2045.

• Scope: This specifically impacts cloud-managed APs. Standalone and controller-managed APs use different certificate structures and are not affected.