User Guide for Cisco Secure Access Control Server - Stewing Home

Chapter 9 System Configuration: Authentication and Certificates
OL-14386-02
EAP-FAST PAC Files Generation (ACS SE)
Step 5 You can now install the replacement certificate in the same manner as an original certificate. For detailed
steps, see Installing an ACS Server Certificate, page 9-22.
EAP-FAST PAC Files Generation (ACS SE)
You can use the EAP-FAST PAC Files Generation page to create PAC files for manual PAC provisioning.
For more information about PACs, see EAP-FAST Authentication, page 9-9.
This section contains:
PAC File Generation Options, page 9-37
Generating PAC Files, page 9-39
PAC File Generation Options
When generating PAC files, you can use:
Specific user—ACS generates a PAC file for the username typed in the User Name box. For
example, if you checked this option and typed seaniemop in the User Name box, ACS generates a
single PAC file, named seaniemop.pac.
Tip You can also specify a domain-qualified username, using the format DOMAIN\username. For example,
if you specify ENIGINEERING\augustin, ACS generates a PAC filename ENGINEERING_augustin.pac.
Users from specific ACS group—ACS generates a PAC file for each user in the user group
specified by the ACS Group list. ACS has 500 groups, numbered from 0 (zero) to 499. For example,
assume that Group 7 has 43 users. If you selected this option and chose Group 7 from the ACS
Group list, ACS would generate 43 PAC files, one for each user who is a member of Group 7. Each
PAC file is named in the following format:
where username.pac is the name of the particular user.
Note Generating PAC files for users in a specific group restarts the CSAuth service. No users are
authenticated while CSAuth is unavailable.
Tip To generate PAC files for more than one group of users, generate PAC files for each group separately.
For example, to generate PAC files for users in Groups 7 through 10, generate PAC files four times, once
each for Groups 7, 8, 9, and 10.
All users in ACS internal DB—ACS generates a PAC file for each user in the ACS internal
database. For example, if you have 3278 users in the ACS internal database and check this option,
ACS would generate 3278 PAC files, one for each user. Each PAC file is named in the following
format:
username.pac
User Guide for Cisco Secure Access Control Server 4.2
9-37