PMP450 requires CNMaestro on-premises to have a valid certificate

[scracha]

So we’ve taken the jump and purchased 3GHz 450i/m APs and 450b subscriber units. Unfortunately I’m not able to get any of them connecting to our
CNMaestro on-premises server. On the router facing the CNMaestro server, I can see traffic coming in from the first PMP450i access point I’ve setup every 5 minutes. Going by the log files on the AP, it appears to be an error with the default server certificate. Our server is internal so I’ve never bothered with an SSL certificate. None of our ePMP radios nor CNMatrix switches seem to have this requirement.

Could someone confirm if this is a requirement for the PMP450 line? If so, does anyone have up-to-date instructions for installing LetsEncrypt/Certbot on CNMaestro?

Many thanks.

07/29/2025 : 13:09:37 FJT : : server's cert didn't look good 29
07/29/2025 : 13:09:37 FJT : : Not able to get cloud details, can't proceed
07/29/2025 : 13:09:37 FJT : : Unable to discover cnMaestro URL (re-discover in 353 seconds)
07/29/2025 : 13:09:37 FJT : : Attempting (re)connection in 5 minutes
07/29/2025 : 13:15:41 FJT : : Got 'Error' for hostname 'cambium.ISP_NAME.net' and certificate:
/O=Cambium Networks Ltd.

PMP450 firmware is 24.2.1
CNMaestro running 5.2.0-r3

[Simon_King]

I don’t believe you need a certificate from a public CA, but as far as I can tell, the certificate does need to match the hostname, either in the SubjectAlternativeName or Common Name parts of the certificate. The error message you are seeing:

13:15:41 FJT : : Got 'Error' for hostname 'cambium.ISP_NAME.net' and certificate: /O=Cambium Networks Ltd.

…is reported when trying to validate the hostname against the certificate.

Could you try generating a (self-signed) certificate with cambium.ISP_NAME.net in the SubjectAlternativeName field?