Congratulations you have successfully setup your Unifi Cloud Key. You should see similar to the below. Note: You can run the UniFi Network Application or UniFi Protect Application individually, or you can run both applications simultaneously. Press the Shutdown button to initiate a graceful shutdown (all services will be shut down and the CPU will remain active). After pressing the button, wait until the LED goes off, and then unplug the Cloud Key. Standalone Mode should only be used when configuring a small quantity of APs because they do not support seamless roaming. Instead, you will need to manually connect to each AP as you move out of range. Also, APs must have a wired connection to your network; wireless meshing is not possible. Finally, remote management is not possible because it is done entirely through the UniFi Mobile app while locally connected to your WiFi.

Now copy the keystore that was symlinked into the location it was linked from. This means the file will still be where the system expected it to be. cp /etc/ssl/private/unifi.keystore.jks /usr/lib/unifi/data/keystoreAt home, I run most of my network based on the Ubiquiti Networks’ Unifi products. I’ve previously written a few times about different solutions that rely on these products, such as expanding my wireless network with a Mesh solution. If you go down the traditional route of obtaining a certificate from a CA then this won't apply to you but if you use a Let's Encrypt certificate you will need some kind of renewal process. You can renew your Let's Encrypt certificate on a fixed schedule with cron, say once a week or once a month. * * 1 * * /path/to/renew.sh # Monthly on the 1st According to the table above, white just means ‘Factory Defaults’. From a users perspective it would be nice to have

python acme_tiny.py --account-key account.key --csr unifi.scotthelme.co.uk.csr --acme-dir /home/scott/acme/challenges > signed.crt We now need to create a new version of unifi.keystore.jks which is what the web interface will use, but using our own certificate instead. For the certificate that you got from your CA you will need the intermediate certificate and the root certificate in PEM form. If you have them in DER form then you can use the following command to convert them. openssl x509 -in intermediate.der -inform DER -out intermediate.crt -outform PEM I also wrote a blog about a script I created called Let's Encrypt Smart Renew. You can call this script hourly and it will only renew the certificate if it actually needs renewing. 0 * * * * /path/to/smartRenew.sh # Hourly on the first minute We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

Ubiquiti UniFi Cloud KeyControllers

At the very least, do not agree to update an extension if it suddenly requests more permissions than a previous Use an 802.3af-compliant switch, such as a UniFi Switch, or a USB power source (not included). UniFi Switch The Cloud Key Gen2 Plus comes pre-installed with a 1TB SATA HDD. If you want to replace it, you must use a 2.5" SATA HDD and follow these instructions: I recently wrote about my new Ubiquiti Home Network and so far I can't find a single fault with any of it. There is however one minor niggle that I wanted to do something about, this: Use an 802.3af-compliant switch, such as a UniFi PoE Switch, a USB power source, or 48V PoE adapter (not included). UniFi Switch

to the power that can be supplied, however low power devices such as the Cloud Key, IP Cameras, Wireless Access Points,Removable hard drive tray for 2.5" SATA drive. The Cloud Key G2 Plus only supports hard drives that can operate on 5V power. Hard drives that require additional power are not supported. For information on configuring and using the UniFi Controller software, refer to the User Guide. Specifications Here is the actual script I'm using on my server to renew the certificate and update the Cloud Key with the new files. #!/bin/bash Switches that are 802.3af/at / PoE compliant can power the cloud key. Simply connect the supplied Ethernet Cable to the The UBNT online account provides internet access to the Cloud Key and thus all of its the adopted devices.

This takes the PKCS #12 file and outputs the unifi.keystore.jks file that we removed earlier. With that in place, you're now ready to start the UniFi service again. service unifi startWARNING: Do not release or operate the HDD Latch while the Cloud Key Gen2 Plus is in use or powered on. Once you have successfully created an account you should still be logged in and see something similar to the below