The lead up to using Ubiquiti Unifi devices started when I wanted a more stable/reliable router and a bit This blog is focused mainly on how to actually put the certificate on your Cloud Key and get it working, but I wanted to provide a little more detail on my setup for those interested. When it is stated that an ubiquiti device is adopted this means that an ubiquiti device is assigned to a UBNT account Here is the actual script I'm using on my server to renew the certificate and update the Cloud Key with the new files. #!/bin/bash setting up the Unifi Cloud Key then you are probably the network administrator and will probably know

The UniFi Controller management interface will appear. You can manage your UniFi devices and view network statistics using the UniFi Controller management interface. UniFi can also be self-hosted on a Windows/macOS/Linux machine, but this is only recommended for users proficient with network administration, because it requires constant and precise attention. You’ll need to manually configure your network for sufficient communication between UniFi Network and all of your networking devices. Success hinges on your ability to continuously navigate various third-party software, firewalls and other networking devices.If power is restored within 10 seconds, the device will return to its previous state. If power is not restored within 10 seconds, the device will safely shutdown. This Gigabit Ethernet port is used to connect the power and should be connected to the LAN and DHCP server. Power can be provided by an 802.3af PoE switch, such as the UniFi PoE Switch. Cloud Key and to a PoE enabled port on the switch. Please note that not all ports on a 802.3af/at / PoE compliant switch As I mentioned in my previous blog I have a HP ProLiant MicroServer running at home that I use for various tasks. My unifi.scotthelme.co.uk subdomain resolves to the IP of that server which obtains the Let's Encrypt certificate for me as it can answer the challenge. The server then connects to the Cloud Key via SSH using key-based auth and copies the new certificate over and runs the commands to regenerate the JKS file and restart the UniFi service. This way there is zero maintenance for me and I keep the full benefits of Let's Encrypt and no worries. There is possibly a way that you could just run Let's Encrypt on the Cloud Key directly and my blog Getting started with Let's Encrypt would be a good place to start if you're interested. For me though I already have my server running locally so it was the easier approach. Use an 802.3af-compliant switch, such as a UniFi PoE Switch, a USB power source, or 48V PoE adapter (not included). UniFi Switch

The demo account is exactly that. It can be used to see what it is like to have several devices to manage, what Congratulations you have successfully setup your Unifi Cloud Key. You should see similar to the below.Now the controller is ready to answer for your new hostname with a valid certificate but if you've taken a similar approach to me, there is one last thing to configure. Because unifi.scotthelme.co.uk resolves to an IP that I use to answer my Let's Encrypt challenge, I needed to add a hosts entry on my PC to resolve it to the local IP instead. 192.168.1.8 unifi.scotthelme.co.uk Device is busy; do not touch or unplug it. This usually indicates that a process such as a firmware upgrade is taking place.

Now copy the keystore that was symlinked into the location it was linked from. This means the file will still be where the system expected it to be. cp /etc/ssl/private/unifi.keystore.jks /usr/lib/unifi/data/keystore For the best setup experience, we recommend updating to the latest version and ensuring that automatic updates are enabled. Open All Required Ports Standalone Mode should only be used when configuring a small quantity of APs because they do not support seamless roaming. Instead, you will need to manually connect to each AP as you move out of range. Also, APs must have a wired connection to your network; wireless meshing is not possible. Finally, remote management is not possible because it is done entirely through the UniFi Mobile app while locally connected to your WiFi.Use an 802.3af-compliant switch, such as a UniFi Switch, or a USB power source (not included). UniFi Switch python acme_tiny.py --account-key account.key --csr unifi.scotthelme.co.uk.csr --acme-dir /home/scott/acme/challenges > signed.crt