User Guide for Cisco Secure Access Control Server - Stewing Home

Appendix C CSUtil Database Utility
OL-14386-02
Tip You can use the -q option to suppress the confirmation prompt.
Posture-Validation Attributes
If you do not want to delete the attribute that the confirmation prompt identifies, type N, press Enter,
and return to Step 2.
CSUtil.exe deletes the posture-validation attribute that you specified from its internal database. In the
following example, CSUtil.exe deleted an attribute with a vendor ID of 9876, an application ID of 1, and
an attribute ID of 1.
Are you sure you want to delete vendor 9876; application 1; attribute 1? (y/n)
y
Vendor 9876; application 1; attribute 1 was successfully deleted
Step 4 For the attribute deletion to take effect, restart the CSAuth and CSAdmin services.
Caution While CSAuth is stopped, no users are authenticated.
To restart the CSAuth, CSLog, and CSAdmin services, enter the following commands at the command
prompt, allowing the computer time to perform each command:
net stop csauth
net start csauth
net stop cslog
net start cslog
net stop csadmin
net start csadmin
Deleted posture-validation attributes are no longer are available in ACS.
Deleting an Extended Posture-Validation Attribute Definition
To delete the extended posture-validation Property attribute contained in the Cisco:Host application:
Step 1 On the computer that is running ACS, open an MS-DOS command prompt and change directories to the
directory containing CSUtil.exe.
Step 2 Type:
CSUtil.exe -delPropHPP
This command removes the specific PROPERTY from an Extended attribute under Cisco:Host.
For more information about vendor, application, and attribute IDs, see Posture-Validation Attribute
Definition File, page C-29.
To delete extended posture-validation ENTITY attributes in the Cisco:Host application:
Step 1 On the computer that is running ACS, open an MS-DOS command prompt and change directories to the
directory containing CSUtil.exe.
Step 2 Type:
User Guide for Cisco Secure Access Control Server 4.2
C-35