User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 9 System Configuration: Authentication and Certificates
OL-14386-02
User Guide for Cisco Secure Access Control Server 4.2
ACS Certificate Setup
The new CA certificate is added to local certificate storage. And, if it is not already there, the name of
the CA that issued the certificate is placed on the CTL.
Tip To use this new CA certificate to authenticate users, you must edit the certificate trust list to
specify that this CA is trusted. For more information, see Editing the Certificate Trust List,
page 9-28.
ACS SE
Note You need to download the CA certificate from an FTP server.
Step 1 In the navigation bar, click System Configuration.
Step 2 Click ACS Certificate Setup.
Step 3 Click ACS Certification Authority Setup.
ACS displays the CA Operations table on the Certification Authorities Setup page.
Step 4 Download the certificate from an FTP server:
a. Enter the FTP IP address.
b. Enter the Path where the certificate is located.
c. Log in to the server and enter the Password.
d. Download the certificate file from the location in your directory.
Step 5 In the CA certificate file box, type the full path and filename for the certificate to use.
Step 6 Click Submit.
The system downloads the private key file and displays the filename in the Private key file box on the
Install ACS Certificate page.
Tip If the file transfer encounters errors, the errors appear in the pane on the right.
Step 7 In the Private key password box, type the private key password.
Step 8 Click Submit.
The new CA certificate is added to local certificate storage. And, if it is not already there, the name of
the CA that issued the certificate is placed on the CTL.
Tip To use this new CA certificate to authenticate users, you must edit the certificate trust list to
specify that this CA is trusted. For more information, see Editing the Certificate Trust List,
page 9-28.
9-27