If you have an Aruba account, they sent out a notice... Below is a portion of the email I received.
SUMMARY
![Aruba Airwave Doesn Aruba Airwave Doesn](/uploads/1/2/6/2/126264636/245378820.jpg)
The ArubaOS operating system loaded on all Aruba Mobility Controllers and Mobility Access Switches contains a pre-loaded digital certificate with the name “securelogin.arubanetworks.com”. As is stated in the user guide, and multiple customer advisories and Airheads Community postings, the default certificate is not intended for production deployment since every Aruba controller or switch contains the same certificate. Aruba has always recommended customers to replace this default certificate with a certificate issued by a public Certificate Authority or by an internal (PKI) Certificate Authority.
Aruba Airwave Download
While a majority of security conscious customers have taken our advice seriously and replaced the default certificate, Aruba is aware that there are still other customers that are using the default certificate in the production networks typically for Administrative WebUI, securing the Captive Portal login screen in guest networks and for dot1x authentication with EAP termination enable.
![Aruba Airwave Doesn Aruba Airwave Doesn](/uploads/1/2/6/2/126264636/811584827.jpg)
This default certificate (securelogin.arubanetworks.com) was issued by a GeoTrust certificate authority (CA) that is trusted by most browsers and operating systems. However, in light of the following articles, http://www.itnews.com.au/news/aruba-products-contain-compromised-https-certificate-436511 and http://www.darkreading.com/vulnerabilities---threats/cryptographic-key-reuse-remains-widespread-in-embedded-products/d/d-id/1326826, securelogin.arubanetworks.com has been revoked
Jul 09, 2015 There are still many more months to go before we get to see what the results of the Aruba-HP deal will bring. August 18th will be here soon, and that will help Aruba partners and customers figure out what their future purchases should consist of. The bigger question will be answered in 2016, after HP has split into two separate companies. Oct 11, 2017 Airheads Accepted Solutions: Privacy Statement Terms Of Use Contact Us: Copyright ©2016 Aruba, a Hewlett Packard Enterprise company. Like the majority of server systems you will install your SSL certificate on the same server where your Certificate Signing Request (CSR) and Private Key was created. To install on Aruba. Description: Aruba Instant in AirWave 8.0 Deployment Guide Collection: 8.0.x: Approved: Yes: Locked: No: Private: No: Deleted: No: Roles that can view: Administrators.