User Guide for Cisco Secure Access Control Server - Stewing Home

ACS Certificate Setup
9-22
Step 1 In the navigation bar, click System Configuration.
Step 2 Click Global Authentication Setup.
The Global Authentications page appears.
User Guide for Cisco Secure Access Control Server 4.2
Chapter 9 System Configuration: Authentication and Certificates
Step 3 Configure options, as applicable. For more information about the significance of the options, see
EAP-FAST Configuration Page, page 9-44.
Step 4 If you want to immediately implement the settings that you have made, click Submit + Apply.
ACS restarts its services and implements the authentication configuration options that you selected.
Step 5 If you want to save the settings that you have made but implement them later, click Submit.
ACS Certificate Setup
Tip You can restart ACS services at any time by using the Service Control page in the System
Configuration section.
ACS saves the authentication configuration options that you selected.
This section contains:
Installing an ACS Server Certificate, page 9-22
Adding a Certificate Authority Certificate, page 9-26
Editing the Certificate Trust List, page 9-28
Deleting a Certificate from the Certificate Trust List, page 9-29
Managing Certificate Revocation Lists, page 9-29
Generating a Certificate Signing Request, page 9-32
Using Self-Signed Certificates, page 9-33
Updating or Replacing an ACS Certificate, page 9-36
Installing an ACS Server Certificate
Perform this procedure to install (that is, enroll) a server certificate for your ACS. You can perform
certificate enrollment to support EAP-TLS and PEAP authentication, as well as to support HTTPS
protocol for GUI access to ACS.
The three options for obtaining your server certificate are:
Obtain a certificate from a CA.
Use an existing certificate from local machine storage.
Generate a self-signed certificate.
OL-14386-02