FWA510 custom HTTPS certificate

Options
oldium
oldium Posts: 2 image  Freshman Member
in Mobile Broadband

Hi, I have not found a way to import a custom HTTPS certificate into Zyxel FWA510 firmware V1.70(ACGD.0)C0. There is a ZYXELcert one, but I have a Lets Encrypt one matching my domain and I would like to use it. After import in Security/Certificates/Local Certificate the imported certificate shows Validity From/To as 0001-01-01T00:00:00Z and in the detail view there is only the certificate, not a private key. Am I doing something wrong? Or is a custom HTTPS certificate not supported (which is REALLY insecure)?

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,789
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    image  Zyxel Employee
    Options

    Hi @oldium ,

    To better assist you, we'd like to try importing the exact same certificate on one of our own FWA510 units. Could you send us the certificate file(s) you used for the import — including the private key via private message (click my account > Message)?

    If you'd rather not share the live certificate for this domain, a fresh Let's Encrypt certificate issued the same way (same tool, same import steps) for a throwaway/test subdomain would also work for reproduction — whichever is easier on your end.

    Zyxel_Judy

  • PeterUK
    PeterUK Posts: 4,796
    250 Answers 2500 Comments Friend Collector Ninth Anniversary
    image  Guru Member
    edited October 5
    Options

    Yes I too could not get that to work on my FWA510 and gave up, its so simple on USG and switches to do but I just can't work out how to do it for the FWA510.

    If it is a bug that it never did work then due to the shorting of certificate being valid needs to have the same method as FLEXH H has with DNS-01 (Cloudflare) would be nice

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,789
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    image  Zyxel Employee
    Options

    Hi @oldium , @PeterUK ,

    Thank you for your patience while we looked into this.

    The certificate import function under Security > Certificates > Local Certificates on the FWA510 is currently intended for the TR-069 client only (TR-069 client is a built-in feature that allows your service provider’s management system to remotely configure, update firmware, and troubleshoot the device).

    As a result, this function cannot currently be used with a custom certificate such as one issued by Let’s Encrypt.

    Zyxel_Judy

Categories

Consumer Product Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）