Home Show
Login Join Login Join
 SteveTheITDude Mar 12, 2014 2 Minute Read
SteveTheITDude SteveTheITDude14 years in ITNetwork+, VCA-DCV
1114 Contributions 77 Best Answers 76 Helpful Posts 2 Projects Main Areas of Contribution:
Register. Track Progress. Earn Credits. Learning has never been so easy! Sign UpRead these next...
IntroductionI recently had to prepare replacing an aging Aruba Wi-FI deployment with an effective, more capable and budget friendly solution. It needed to offer both corporate (Radius Server) and guest Wi-Fi access for modern workplace needs. We selected Ubiquiti equipment to comply with the requirements. Apart from the WAPs all gear goes into server & network racks. The controller had to be implemented on-premises (self-managed, not via a service provider). As they have a modern Hyper-V environment we opted to deploy the controller on a Windows 2019 virtual machine. By the time the solution is deployed that will have become generally available. A Cloud Key appliance or Raspberry PI was less interesting in this environment that had professional racks in available in dedicated server & network rooms. OK, you can use Windows Server 2016 or Windows Server 2012 R2 as well. Note that I don’t like using a client OS for an infrastructure role. I would also not use older server versions because I like longevity in support. I dislike solutions that are out of support a week after I deployed it. The big take away here is that you want to tweak the standard deployment of the controller a bit.
Below are my lab notes as reference to myself and my readers in regards to running the Ubiquiti UniFi Controller as a service on Windows Server 2019. InstallationFor some reason the installer dumps all the files in the user profile of the person running the installer. Which is easy in terms of permissions. But people leave and profiles get deleted. Multiple people need to manage systems so having it tied to an individual isn’t that great. For a UniFi install is first install java (x64) and a x64 bit browser. Chrome & Firefox are support, others may be as well or just work. The controller runs on Java so that’s a no brainer you need it. You don’t need a browser on the virtual machine per se, but it acts as a console access to the controller via the VM in case of network issues. Having multiple options is good. If you don’t need that, Windows Core will do. Step by Step1. Install the controller with the
UniFi-installer.exe installer. It will put the installation under C:\Users\USERNAME\Ubiquiti UniFi 4. I then also change the “Target” path to “C:\ProgramData\Ubiquiti UniFi\lib\ace.jar” ui and “Start in” path to “C:\ProgramData\Ubiquiti UniFi”path. That way that short cut points to the right location. However, I want my controller to run as a service so we won’t be using that shortcut too much. Anyway, we have a clean nice setup right now to continue with. Please note you do not need to install a browser on the server itself. This was done to give people a virtual machine console access option in case they have network issue. If don’t want that you can use Windows Server Core Running as a serviceSince we want the controller to always run and behave like a service, we just have some extra work to do. This is documented here: https://help.ubnt.com/hc/en-us/articles/205144550-UniFi-Run-the-Controller-as-a-Windows-service I just adapted this to my path. 1. Close any instances of the UniFi software on the computer. If you just installed the UniFi controller, make sure to open it once by using the icon on the desktop or within the start menu. Once it says “UniFi Controller
(a.b.c) started.” you can close the controller program. This is needed to generate some required files for the service to work. Installing a proper certificateAfter entering the FQDN A record or CNAME to your DNS infra you will still get a security warning as we haven’t installed a proper certificate yet. Let’s fix this unprofessional looking fist view of your controller web application! We’ll use a recent cert from either a corporate or public PKI. Take your pick, there are free ones out there if you need that. I’m using a wild card certificate and will show you how to implement it with the Unifi controller. The trick is to replace default Keystore with a custom one in which you added your certificate. There is are nice tools for that and the exact method will vary a bit. This is what I did. Note that you can do this on your workstation, no need o do all this on your server with the UniFi Controller. Keep that tidy. Make sure you have your cert available (exported) as a pfx file. The Windows application methodDownload KeyStore Explorer (http://keystore-explorer.org/downloads.html) and install in on your PC, the default settings are just fine. Have your certificate exported as pfx file with private key and the option “Include all certificates in the certification path if possible”. Run KeyStore Explorer and under tools select “Import Key Pair” As type select PKCS #12 Browse to your pfx cert you created, fill out the correct password and click “Import” I’m happy with my default alias of * as I have a wild card cert. You should use unifi.domain.ext if you don’t have a wild card to be clear. Enter the new Key Pair password, again I use “aircontrolenterprise” Click OK and your see that your import was successful. Click OK. Now select your keypair and under the File menu select “Save As” For the password, again, use aircontrolenterprise, click OK and fill out keystore for the file name. Click save, your done here. I actually delete the imported key pair form KeyStore Explorer and also shift delete the export pfx. It’s better not to have these sorts of files lingering around on your workstation even when using bitlocker. You must have a cert management process. The results of your workNow on your controller VM navigate to your data path, in my case it’s C:\ProgramData\Ubiquiti UniFi\data. Rename the original keystore file to keystor.ori and past the one you created in this folder. You then need to restart the UniFi Controller service, either in the GUI or via the command prompt. Give the controller 10 second to get going properly and click your UniFi Dashboard shortcut to browse to the application. And now, as you can see, below we have a much better user experience. This is actually the logon screen after you’ve run through the initial install wizard when you first launch the application. We now have a well-behaved web application to securely access the UniFi controller and manage the Wi-Fi setup.jjj The native java tools methodIf you want you can use native Java tools to do the same as with the KeyStore Explorer app replace those steps above by the one below. C:\Program Files\Java\jre1.8.0_181\bin>Keytool.exe -list -keystore C:\SysAdmin\Certs\exported_wildcard_workinghardinit_work.pfx -storetype pkcs12 which prompts for your password and outputs: Enter keystore password: Your keystore contains 1 entry 1524853e062d1785ac5ebedb44a61065, Aug 30, 2018, PrivateKeyEntry, C:\Program Files\Java\jre1.8.0_181\bin>keytool -importkeystore -srcstoretype pkcs12 -srcalias 1524853e062d1785ac5ebedb44a61065 -srckeystore C:\SysAdmin\Certs\exported_wildcard_workinghardinit_work.pfx -keystore C:\SysAdmin\Certs\keystore -destalias *.workinghardinit.work Importing keystore C:\SysAdmin\Certs\exported_wildcard_workinghardinit_work.pfx to C:\SysAdmin\Certs\keystore… Enter destination keystore password: aircontrolenterprise Warning: ConclusionUbiquiti delivers value for money Wi-fi solutions. The gear is good and affordable with manageability options that serve the majority of needs for the SME. It perfect for the more demanding SOHO environment. Ubiquiti offers flexibility but also requires some “tweaking” to get just right. This goes for both the software installation (fixing some default installation choices and installing a certificate) as well as some of the hardware (installing less loud fans) shortcomings. For many people a virtual machine with Windows is something they already have the infrastructure for. It fist perfectly into their existing operational processes. A virtual machine also fits well into many customers their existing backup and restore scenarios. A virtual machine can also easily be “checkpointed” to revert to a known good situation. This is an extra benefit in case something goes wrong during an upgrade or update wrong. This combined with the Auto Backup Configuration of the UniFi controller cover most bases for quick recovery. Not too many people can restore their raspberry PI or appliance that fast. We chose to use Windows Server 2019 in this demo as we wanted to future proof the deployment . So we want to deliver the controller on an OS that will serve them well for many years to come. To recap, first I showed you how to improve on the default installation. We than made the UniFi controller runs as a service. Finally I configured an SSL certficate for the controller app. I hope you liked it and that it helps you out. How do I update UniFi controller as a service?Upgrade UniFi Controller Running as a Service. Back up your config from Settings > Maintenance > Download Backup. ... . On the server running the controller, open an administrative Command Prompt. ... . Overinstall the new controller (run UniFi-installer.exe).. How do I access my UniFi Network controller?Windows users: Start > All Programs > Ubiquiti UniFi. 2. The UniFi login screen will appear. Enter the admin name and password in the appropriate fields and click Login.
Is UniFi Network application the same as UniFi controller?They are the same thing. 'UniFi Network Application' is the new name for the controller.
Which device is the UniFi controller?UNIFI NETWORK DEVICES CONTROLLER UNIFI-UC-CK UBIQUITI
The UNIFI-UC-CK controller allows to manage the entire LAN based on Ubiquiti UniFi series devices. The device allows to manage switches, access points and other devices both from the network in which they are located, as well as through a secured HybridCloud cloud.
|
What is the name of the UniFi controller service?
Postagens relacionadas
direito autoral © 2024 cemle Inc.
