User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 8 System Configuration: Advanced
OL-14386-02
NAC Attribute Management (ACS SE Only)
For more information about posture validation attributes and how they are identified, see About Posture
Credentials and Attributes, page 13-5. For more information about extended attributes, see Extended
Attributes, page 13-6.
Note Completion of this procedure requires restart of the CSAuth service, which temporarily
suspends authentication services. You should consider performing this procedure when demand
for ACS services is low.
To delete posture validation attributes:
Step 1 In the navigation bar, click System Configuration.
Step 2 Click CNAC Attribute Management.
The CNAC Attribute Management page appears.
Step 3 Select the Delete Attribute option.
Step 4 Enter the details that identify the attribute:
a. In the Vendor ID box, enter the number that identifies the vendor.
b. In the Application ID box, enter the number that identifies the application.
c. In the Attribute ID box, enter the number that identifies the attribute.
The attribute that you want to delete is uniquely identified.
Step 5 Click Submit.
ACS deletes the definition for the attribute that you specified.
Step 6 If you have no more changes to make to the attribute definitions in ACS and you want your changes to
take effect, restart the following services:
CSAuth and CSLog—See Stopping, Starting, or Restarting Services, page 7-2.
CSAdmin—You can use the restart command at the serial console. For more information about this
command, see the Installation Guide for Cisco Secure ACS Solution Engine Release 4.2.
To delete an extended posture validation entity attribute in the Cisco:Host application:
Step 1 In the navigation bar, click System Configuration.
Step 2 Click CNAC Attribute Management.
The CNAC Attribute Management page appears.
Step 3 Select the Delete Extended Attribute Entity option.
Step 4 Enter the details required to identify the attribute that you want ACS to delete:
a. In the Attribute ID box, enter the number that identifies the attribute.
b. In the Entity box, enter the name of the entity.
The attribute that you want to delete is uniquely identified.
Step 5 Click Submit.
ACS deletes its definition for the attribute that you specified.
User Guide for Cisco Secure Access Control Server 4.2
8-49