User Guide for Cisco Secure Access Control Server - Stewing Home

Token Server User Databases
12-54
User Guide for Cisco Secure Access Control Server 4.2
Chapter 12 User Databases
Note You should only click the From Token Server (async tokens only) option if all tokens that are
submitted to this token server are asynchronous tokens.
Step 9 Click Submit.
ACS saves the RADIUS token server database configuration that you created. You can add it to your
Unknown User Policy or assign specific user accounts to use this database for authentication. For more
information about the Unknown User Policy, see About Unknown User Authentication, page 15-3. For
more information about configuring user accounts to authenticate by using this database, see Chapter 6,
“User Management.”
Using RSA Token-Card Client Software
ACS supports mapping users who are authenticated by a RSA token server to a single group. For more
information, see Group Mapping by External User Database, page 16-1.
ACS supports PPP (ISDN and async) and Telnet for RSA SecurID token servers by acting as a token-card
client to the RSA SecurID token server. To use this client you must install the RSA token-card client
software on the computer that is running ACS. The following procedure includes the steps that you
follow to install the RSA client correctly on the computer that is running ACS.
ACS supports the RSA SecurID token server custom interface for authentication of users. You can create
only one RSA SecurID configuration within ACS.
ACS for Windows
Before You Begin
You should install and configure your RSA SecurID token server before configuring ACS to authenticate
users with it. For information about installing the RSA SecurID server, refer to the documentation for
your token server.
Ensure that you have the applicable RSA ACE Client.
To configure ACS to authenticate users with an RSA token server:
Step 1 Install the RSA client on the computer that is running ACS:
a. With a username that has administrative privileges, log in to the computer that is running ACS.
b. Run the Setup program of the ACE Client software, following the setup instructions that RSA
provides.
Note Do not restart Windows when installation is complete.
c. Locate the ACE Server data directory, for example, /sdi/ace/data.
d. Get the file named sdconf.rec and place it in the following Windows directory:
%SystemRoot%\system32.
For example:
\winnt\system32
e. Ensure that the ACE server hostname is in the Windows local host file:
OL-14386-02