---
title: Device authentication (AltoPlex devices only)
description: AltoCommand requires authenticated access to devices to be able to perform write operations to the device, including firmware upgrades and certain configuration tasks such as automated rebeamforming. To provide authenticated access, AltoCommand needs to install client certificates to have SSL-based authentication to AltoPlex devices.
---

[Skip to content](https://support.altowav.com/device-authentication-altoplex-devices-only#main-content)

[![AltowaveLogoRGB-crop-3](https://support.altowav.com/hubfs/AltowaveLogoRGB-crop-3.svg)](https://support.altowav.com/?hsLang=en-us)

Open main navigation

Close main navigation

- [Contact Support](https://support.altowav.com/contacting-altowav-technical-support)

[Contact Support](https://support.altowav.com/contacting-altowav-technical-support?hsLang=en-us)

 How can we help you?

- There are no suggestions because the search field is empty.

1. [Altowav Support](https://support.altowav.com/?hsLang=en-us)
2. [AltoCommand](https://support.altowav.com/altocommand?hsLang=en-us)
3. [Configuration](https://support.altowav.com/altocommand?hsLang=en-us#configuration)

# Device authentication (AltoPlex devices only)

AltoCommand requires authenticated access to devices to be able to perform write operations to the device, including firmware upgrades and certain configuration tasks such as automated rebeamforming. To provide authenticated access, AltoCommand needs to install client certificates to have SSL-based authentication to AltoPlex devices.

To install a certificate on the device, AltoCommand requires write access to the device. If you have changed device’s password, you will be asked to provide the password. The password is needed for one-time access to install the certificate, and is not stored on AltoCommand.

For information about backing up AltoCommand certificates, see [Back up and restore AltoCommand certificate files](https://support.altowav.com/back-up-and-restore-altocommand-certificate-files.html?hsLang=en-us).

1. Open the AltoCommand WebUI:
   
   In your browser's address bar, type:
   
   **https://*hostname***
   
   where *hostname* is the fully qualified domain name of the AltoCommand server.
2. Log into the WebUI as a user with admin privileges.
   
   ![AltoCommand login](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/login_49b288d7.png?width=218&height=243&name=login_49b288d7.png)
   
   The default username is **admin**
   
   The default password is **admin**
3. Click **Settings** \> **Site Devices**.
4. In the list of devices, under **Certificate**, an icon indicates the current certificate status.
5. For devices that have not yet been authenticated, click the ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-empty-seal_31ef70ae.png?width=19&height=20&name=certificate-icon-empty-seal_31ef70ae.png) icon in the **Certificate** column next to the device.
   
   AltoCommand will install a certificate on the device. When the certificate installation is complete, the icon will change to a check mark (![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-green-check_769ddd8c.png?width=19&height=20&name=certificate-icon-green-check_769ddd8c.png)).

![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/settings-site-devices-networks-certificate-status_12915ce6.png?width=378&height=238&name=settings-site-devices-networks-certificate-status_12915ce6.png)

#### Certificate-related icons and remediation tasks

Various icons may appear in the **Certificate** column:

| **Icon** | **Meaning** | **Remediation** |
| --- | --- | --- |
| ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-green-check_769ddd8c.png?width=33&height=33&name=certificate-icon-green-check_769ddd8c.png) | Authentication is successful. |  |
| ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-empty-seal_31ef70ae.png?width=36&height=37&name=certificate-icon-empty-seal_31ef70ae.png) | Authentication has not been performed. | Click the icon to begin the authentication process. |
| ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-red-exclamation_5c6f5d39.png?width=31&height=30&name=certificate-icon-red-exclamation_5c6f5d39.png) | Authentication failed. | Click the icon and select **Try again**. |
| ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-grey-questionmark_902fde0b.png?width=33&height=33&name=certificate-icon-grey-questionmark_902fde0b.png) | Authentication is in an unknown state. | This could be the result of a device being offline or unreachable. |
| ![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-traffic-cone_6852babe.png?width=28&height=34&name=certificate-icon-traffic-cone_6852babe.png) | Device is already authenticated with another instance of AltoCommand. | Click the icon to reauthenticate on this instance of AltoCommand. |

#### Delete an existing client certificate

Generally, it shouldn't be necessary to delete existing client certificates. For example, if a devices is moved from one instance of AltoCommand to another, simply click the **Reauthenticate** icon  
(![](https://support.altowav.com/hs-fs/hubfs/kb-images/altocommand/certificate-icon-traffic-cone_6852babe.png?width=28&height=34&name=certificate-icon-traffic-cone_6852babe.png)) to reauthenticate the device on the new instance of AltoCommand.

If you do need to delete the client certificate, do one of the following:

- Factory reset the device. See device documentation for instructions.
- Use the install\_client\_ca\_certificate?reset=true REST API, for example:
  
  $ curl -k -u admin:admin \\  
  https://*server\_name*/rest/v002/security/install\_client\_ca\_certificate?reset=true \\  
  -X POST \\  
  -d ""

Where *server\_name* is the IP address or hostname.local (KB-XX-XX-XX.local) of the device.

- [AltoPlex Radios](https://support.altowav.com/altoplex-radios?hsLang=en-us#main-content)

    - [First-Time Setup](https://support.altowav.com/altoplex-radios?hsLang=en-us#first-time-setup)
    - [Configuration](https://support.altowav.com/altoplex-radios?hsLang=en-us#configuration)
    - [Network Design & Deployment](https://support.altowav.com/altoplex-radios?hsLang=en-us#network-design-deployment)
    - [Troubleshooting](https://support.altowav.com/altoplex-radios?hsLang=en-us#troubleshooting)
- [AltoReach Radios](https://support.altowav.com/altoreach-radios?hsLang=en-us#main-content)

    - [First-Time Setup](https://support.altowav.com/altoreach-radios?hsLang=en-us#first-time-setup)
    - [Configuration](https://support.altowav.com/altoreach-radios?hsLang=en-us#configuration)
    - [Deployment & Aiming](https://support.altowav.com/altoreach-radios?hsLang=en-us#deployment-aiming)
    - [Troubleshooting](https://support.altowav.com/altoreach-radios?hsLang=en-us#troubleshooting)
- [K60 Radios](https://support.altowav.com/k60-radios?hsLang=en-us#main-content)

    - [First-Time Setup](https://support.altowav.com/k60-radios?hsLang=en-us#first-time-setup)
    - [Configuration](https://support.altowav.com/k60-radios?hsLang=en-us#configuration)
    - [Troubleshooting](https://support.altowav.com/k60-radios?hsLang=en-us#troubleshooting)
- [AltoCommand](https://support.altowav.com/altocommand?hsLang=en-us#main-content)

    - [Getting Started](https://support.altowav.com/altocommand?hsLang=en-us#getting-started)
    - [Dashboard & Monitoring](https://support.altowav.com/altocommand?hsLang=en-us#dashboard-monitoring)
    - [Device & Fleet](https://support.altowav.com/altocommand?hsLang=en-us#device-fleet)
    - [Management](https://support.altowav.com/altocommand?hsLang=en-us#management)
    - [Configuration](https://support.altowav.com/altocommand?hsLang=en-us#configuration)
    - [Map](https://support.altowav.com/altocommand?hsLang=en-us#map)
- [Product Reference](https://support.altowav.com/product-reference?hsLang=en-us)
- [Downloads & Resources](https://support.altowav.com/downloads-resources?hsLang=en-us#main-content)

    - [AltoPlex Docs](https://support.altowav.com/downloads-resources?hsLang=en-us#altoplex-docs)
    - [AltoReach Docs](https://support.altowav.com/downloads-resources?hsLang=en-us#altoreach-docs)
    - [K60 Docs](https://support.altowav.com/downloads-resources?hsLang=en-us#k60-docs)
    - [AltoPlex Firmware](https://support.altowav.com/downloads-resources?hsLang=en-us#altoplex-firmware)
    - [K60 (Gen2) Firmware](https://support.altowav.com/downloads-resources?hsLang=en-us#k60-gen2-firmware)
    - [AltoCommand Docs](https://support.altowav.com/downloads-resources?hsLang=en-us#altocommand-docs)
- [Account & Support](https://support.altowav.com/account-support?hsLang=en-us#main-content)

    - [Contacting Support](https://support.altowav.com/account-support?hsLang=en-us#contacting-support)
    - [Return & RMA](https://support.altowav.com/account-support?hsLang=en-us#return-rma)

[![altowav.com](https://support.altowav.com/hubfs/AltowaveLogoRGB-crop-2.svg "altowav.com")](https://altowav.com)

© 2026 Altowav. All rights reserved.