I also wrote a blog about a script I created called Let's Encrypt Smart Renew. You can call this script hourly and it will only renew the certificate if it actually needs renewing. 0 * * * * /path/to/smartRenew.sh # Hourly on the first minute

The Cloud Key Gen2 Plus comes pre-installed with a 1TB SATA HDD. If you want to replace it, you must use a 2.5" SATA HDD and follow these instructions: differences is that it does not matter which way round the connector is plugged in. The connector shape is a rectangle Use an 802.3af-compliant switch, such as a UniFi Switch, or a USB power source (not included). UniFi Switch The UniFi Controller management interface will appear. You can manage your UniFi devices and view network statistics using the UniFi Controller management interface.Note: The Cloud Key G2 Plus only supports hard drives that can operate on 5V power. Hard drives that require additional power are not supported. Connects to a gigabit switch port on your LAN. Power can be provided by an 802.3af PoE switch, such as the UniFi PoE Switch. Device is busy; do not touch or unplug it. This usually indicates that a process such as a firmware upgrade is taking place.

For information on configuring and using the UniFi Controller software, refer to the User Guide. Specifications Now the controller is ready to answer for your new hostname with a valid certificate but if you've taken a similar approach to me, there is one last thing to configure. Because unifi.scotthelme.co.uk resolves to an IP that I use to answer my Let's Encrypt challenge, I needed to add a hosts entry on my PC to resolve it to the local IP instead. 192.168.1.8 unifi.scotthelme.co.uk Restore to Factory Default Settings Press and hold the Reset button for more than five seconds, until the status LED begins flashing white. Layer-2 networks or not. If you are the network administrator but don’t know if you have multiple Layer-2 networks The demo account is exactly that. It can be used to see what it is like to have several devices to manage, whatThe UniFi Cloud Key Gen2 Plus is an integrated hardware controller and self-contained application server designed to monitor and manage your UniFi network devices and camera surveillance system. It features an eight-core processor with 3 GB RAM, a 1 TB SATA HDD for video storage, and 32 GB eMMC flash storage, and utilizes the latest version of the UniFi Controller with hybrid cloud technology. We now need to create a new version of unifi.keystore.jks which is what the web interface will use, but using our own certificate instead. For the certificate that you got from your CA you will need the intermediate certificate and the root certificate in PEM form. If you have them in DER form then you can use the following command to convert them. openssl x509 -in intermediate.der -inform DER -out intermediate.crt -outform PEM This blog is focused mainly on how to actually put the certificate on your Cloud Key and get it working, but I wanted to provide a little more detail on my setup for those interested. For the best setup experience, we recommend updating to the latest version and ensuring that automatic updates are enabled. Open All Required Ports You may choose to restrict the collection or use of your personal information in the following ways:

Now, rather than delete the file we're going to rename it so we have it around for later, just in case. mv /etc/ssl/private/unifi.keystore.jks /etc/ssl/private/unifi.keystore.jks.old Designed for convenient monitoring and complete management of your camera surveillance system, the UniFi Protect Controller allows you to set up, configure, and monitor your UniFi cameras using a graphical user interface. As one of the built-in apps on the Cloud Key Gen2 Plus, there are no separate software, licensing, hosting, or support fees. At home, I run most of my network based on the Ubiquiti Networks’ Unifi products. I’ve previously written a few times about different solutions that rely on these products, such as expanding my wireless network with a Mesh solution. I recently wrote about my new Ubiquiti Home Network and so far I can't find a single fault with any of it. There is however one minor niggle that I wanted to do something about, this: Cloud Key and to a PoE enabled port on the switch. Please note that not all ports on a 802.3af/at / PoE compliant switchFor the purposes of setting up the Cloud Key, the UBNT online account (through the use of a chrome plugin) also

I got an RSA certificate for my Cloud Key because I wasn't sure if it was going to support ECDSA keys/ciphers. ECDSA keys are a lot faster, just look at Testing out ECDSA certificates, but in this scenario the benefits are probably not going to be noticed. I also doubt that it would support hybrid certificates but if you feel brave enough to try it out, let me know. This takes the PKCS #12 file and outputs the unifi.keystore.jks file that we removed earlier. With that in place, you're now ready to start the UniFi service again. service unifi start This Gigabit Ethernet port is used to connect the power and should be connected to the LAN and DHCP server. Power can be provided by an 802.3af PoE switch, such as the UniFi PoE Switch. When it is stated that an ubiquiti device is adopted this means that an ubiquiti device is assigned to a UBNT account The UniFi Network Application and UniFi Protect Applications come pre-installed on the Cloud Key Gen2 Plus.After this we need to remove the symlink to the existing keystore. This is where the system looks for the keystore. rm /usr/lib/unifi/data/keystore Some time later it was time to upgrade hardware (mostly due to get 802.11n/5GHz wireless) and I wanted to Once you have successfully created an account you should still be logged in and see something similar to the below