UBIQUITI Networks UniFi Cloud Key Controller

Product Information

Once you have successfully created an account you should still be logged in and see something similar to the below The UniFi Cloud Key Gen2 Plus is an integrated hardware controller and self-contained application server designed to monitor and manage your UniFi network devices and camera surveillance system. It features an eight-core processor with 3 GB RAM, a 1 TB SATA HDD for video storage, and 32 GB eMMC flash storage, and utilizes the latest version of the UniFi Controller with hybrid cloud technology. We now need to create a new version of unifi.keystore.jks which is what the web interface will use, but using our own certificate instead. For the certificate that you got from your CA you will need the intermediate certificate and the root certificate in PEM form. If you have them in DER form then you can use the following command to convert them. openssl x509 -in intermediate.der -inform DER -out intermediate.crt -outform PEM

Use an 802.3af-compliant switch, such as a UniFi PoE Switch, a USB power source, or 48V PoE adapter (not included). UniFi Switch For information on configuring and using the UniFi Controller software, refer to the User Guide. Specifications Note: You can run the UniFi Network Application or UniFi Protect Application individually, or you can run both applications simultaneously. UniFi can also be self-hosted on a Windows/macOS/Linux machine, but this is only recommended for users proficient with network administration, because it requires constant and precise attention. You’ll need to manually configure your network for sufficient communication between UniFi Network and all of your networking devices. Success hinges on your ability to continuously navigate various third-party software, firewalls and other networking devices.

Ubiquiti UniFi Cloud Key Gen2 Plus

This takes the PKCS #12 file and outputs the unifi.keystore.jks file that we removed earlier. With that in place, you're now ready to start the UniFi service again. service unifi start

setting up the Unifi Cloud Key then you are probably the network administrator and will probably know The Cloud Key Gen2 Plus comes pre-installed with a 1TB SATA HDD. If you want to replace it, you must use a 2.5" SATA HDD and follow these instructions: This blog is focused mainly on how to actually put the certificate on your Cloud Key and get it working, but I wanted to provide a little more detail on my setup for those interested.For the best setup experience, we recommend updating to the latest version and ensuring that automatic updates are enabled. Open All Required Ports

After this we need to remove the symlink to the existing keystore. This is where the system looks for the keystore. rm /usr/lib/unifi/data/keystore Removable hard drive tray for 2.5" SATA drive. The Cloud Key G2 Plus only supports hard drives that can operate on 5V power. Hard drives that require additional power are not supported. Connects to a gigabit switch port on your LAN. Power can be provided by an 802.3af PoE switch, such as the UniFi PoE Switch. Restore to Factory Default Settings Press and hold the Reset button for more than five seconds, until the status LED begins flashing white.If you go down the traditional route of obtaining a certificate from a CA then this won't apply to you but if you use a Let's Encrypt certificate you will need some kind of renewal process. You can renew your Let's Encrypt certificate on a fixed schedule with cron, say once a week or once a month. * * 1 * * /path/to/renew.sh # Monthly on the 1st As I mentioned in my previous blog I have a HP ProLiant MicroServer running at home that I use for various tasks. My unifi.scotthelme.co.uk subdomain resolves to the IP of that server which obtains the Let's Encrypt certificate for me as it can answer the challenge. The server then connects to the Cloud Key via SSH using key-based auth and copies the new certificate over and runs the commands to regenerate the JKS file and restart the UniFi service. This way there is zero maintenance for me and I keep the full benefits of Let's Encrypt and no worries. There is possibly a way that you could just run Let's Encrypt on the Cloud Key directly and my blog Getting started with Let's Encrypt would be a good place to start if you're interested. For me though I already have my server running locally so it was the easier approach. I recently wrote about my new Ubiquiti Home Network and so far I can't find a single fault with any of it. There is however one minor niggle that I wanted to do something about, this:

Switches that are 802.3af/at / PoE compliant can power the cloud key. Simply connect the supplied Ethernet Cable to the You may to see the Your connection is not private again. As this is a very specific case where it is Standalone Mode should only be used when configuring a small quantity of APs because they do not support seamless roaming. Instead, you will need to manually connect to each AP as you move out of range. Also, APs must have a wired connection to your network; wireless meshing is not possible. Finally, remote management is not possible because it is done entirely through the UniFi Mobile app while locally connected to your WiFi. Device is busy; do not touch or unplug it. This usually indicates that a process such as a firmware upgrade is taking place. I deliberately had no other Unifi devices connected to my network for this post which is why it saysLayer-2 networks or not. If you are the network administrator but don’t know if you have multiple Layer-2 networks Here is the actual script I'm using on my server to renew the certificate and update the Cloud Key with the new files. #!/bin/bash The UniFi Controller management interface will appear. You can manage your UniFi devices and view network statistics using the UniFi Controller management interface.