Hi lexam,

most recipes to exchange the SSL cert of an EAP Controller are unnecessarily complex, albeit it's very easy to do so if you follow this recipe to insert a PKCS12 cert (PKCS12 is an industry standard meanwhile supported by Java, too).

As for an even more easy method I once planned to create a command for tpeap which could automate those steps, but since it is a seldom used one-time config action much like adding a SSL cert into the Apache web server config or into the config files of a mail transfer agent, it's probably not worth the expense to automate those simple three steps.