Guest

Cisco Secure Access Control Server for Windows

Cisco Secure ACS for Windows Compatibility

Hierarchical Navigation

Document ID: 14308

Updated: Nov 21, 2007

   Download PDF
   Print

Introduction

This document presents the software and hardware with which Cisco Secure ACS for Windows (ACS) is compatible.

Prerequisites

Requirements

There are no specific requirements for this document.

Components Used

This document presents compatibility information about the specific software and hardware versions discussed in the sections of this document.

Note: The name for this product has changed to reflect the supported software and hardware.

  • Versions 1.0 through 2.4(x) are referred to as Cisco Secure for Windows NT (CSNT).

  • Versions 2.5(x) and later are referred to as Cisco Secure ACS for Windows (ACS).

Conventions

Refer to the Cisco Technical Tips Conventions for more information on document conventions.

Software

This section specifies the operating systems, web browsers, and database programs that are compatible with Cisco Secure ACS for Windows.

Operating Systems

Version Compatible With
CSNT 2.3(x)
  • Windows NT 4.0 English language version (Service Pack 3 recommended)
CSNT 2.4(x)
  • Windows NT 4.0 English language version
  • 2.4(x) has been tested with Service Pack 4 and 5

    Note: Service Packs 3 and earlier are not Year-2000 compliant.
ACS 2.5(x)
  • Windows 2000 Server
  • Windows 2000 Advanced or Datacenter Server without Microsoft Clustering Services installed
  • Windows NT Server 4.0, English language version (Service Pack 6a)
ACS 2.6.2 and 2.6.3
  • Windows 2000 Server (Service Pack 1)
  • Windows 2000 Advanced or Datacenter Server without Microsoft Clustering Services installed (Service Pack 1)
  • Windows NT Server 4.0, English language version (Service Pack 6a)
ACS 2.6.4
  • Windows 2000 Server (Service Pack 1 or 2)
  • Windows 2000 Advanced or Datacenter Server without Microsoft Clustering Services installed (Service Pack 1 or 2)
  • Windows NT Server 4.0, English language version (Service Pack 6a)
ACS 3.0(x)
  • Windows 2000 Server (Service Pack 1 or 2)
  • Windows 2000 Advanced or Datacenter Server without Microsoft Clustering Services installed (Service Pack 1 or 2)
  • Windows NT Server 4.0, English language version (Service Pack 6a)
ACS 3.1(x)
  • Windows 2000 Server, English language version (Service Pack 3)

    Note: As of version 3.1(x), ACS is not supported on Windows NT or Windows Advanced or Database Server. In addition, ACS is not supported with Windows 2000 Clustering.

ACS 3.2(x)
  • Windows 2000 Server (Service Pack 3), English language versions.

    Note: Windows 2000 Advanced Server and Windows 2000 Datacenter Server are not supported operating systems.
ACS 3.3(x) Windows 2000 Server, with Service Pack 4 installed
  • Windows 2000 Advanced Server, with these conditions:
    • with Service Pack 4 installed
    • without features specific to Windows 2000 Advanced Server enabled
  • Windows Server 2003, Enterprise Edition
  • Windows Server 2003, Standard Edition

    Note: Both the operating system and the service pack must be English-language versions.

These restrictions apply to support for Microsoft Windows operating systems:
  • The multi-processor feature of any supported operating system has not been tested and cannot be supported.
  • Cisco cannot support Microsoft clustering service on any supported operating system.
  • Windows 2000 Datacenter Server is not a supported operating system.
  • When you run Cisco Secure ACS on a Windows Server 2003, you might encounter event messages that falsely indicate that Cisco Secure ACS services have failed. This issue is documented in Cisco bug CSCea91690. For more information about Cisco bug ID CSCea91690, see Table 3 of the Release Notes.
ACS 4.0
  • Windows 2000 Server
  • Windows 2000 Advanced Server (Service Pack 4) without features specific to Windows 2000 Advanced Server enabled, or without Microsoft clustering service installed.
  • Windows Server 2003, Enterprise Edition or Standard Edition (Service Pack 1).
ACS 4.1
  • Windows 2000 Server (English version only)
  • Windows 2000 Advanced Server (Service Pack 4) without features specific to Windows 2000 Advanced Server enabled, or without Microsoft clustering service installed (English version only).
  • Windows Server 2003, Enterprise Edition or Standard Edition (Service Pack 1).
  • Japanese Windows Server 2003 (Service Pack 1).

Note these caveats as you work with ACS/CSNT and the Windows Operating Systems.

  • In order to have CSNT refer to the Grant Dial-in Permission to User feature, make sure this option is checked in the Windows NT User Manager for the applicable user accounts.

  • An ACS server can be a Primary Domain Controller, a Backup Domain Controller, or a member server.

  • If Symantec Antivirus runs on the same machine as the ACS server, you might be unable to stop the CSAuth service manually. In order to resolve this issue, try to stop the Symantec Antivirus service first and then stop the CSAuth service.

Web Browsers

Version Compatible With
CSNT 2.3(x)
  • Microsoft Internet Explorer 3.02 or later
  • Netscape Navigator 3.x
  • Netscape Communicator 4.x or later
CSNT 2.4(x)
  • Microsoft Internet Explorer 4 or 5
  • Netscape Navigator 4.0x
  • Netscape Communicator 4.x
ACS 2.5(x)
  • Microsoft Internet Explorer 5.0.x
  • Netscape Communicator 4.72, 4.73, and 4.75
ACS 2.6
  • Microsoft Internet Explorer versions 5.0.x and 5.5
  • Netscape Communicator versions 4.75 and 4.76
ACS 3.0.1
  • Microsoft Internet Explorer versions 5.0.x and 5.5
  • Netscape Communicator version 4.76
ACS 3.0.2
  • Microsoft Internet Explorer versions 5.5 and 6.0
  • Netscape Communicator version 4.76
ACS 3.0.3
  • Microsoft Internet Explorer version 6.0
  • Netscape Communicator version 7.0
ACS 3.1(x)
  • Microsoft Internet Explorer versions 5.5 and 6.0
  • Netscape Communicator version 6.2.3
ACS 3.2(x)
  • Microsoft Internet Explorer version 6.0 with Service Pack 1
  • Netscape Communicator version 7.0
  • Netscape Communicator version 7.0 for Solaris 2.7
ACS 3.3(x) In order to administer all features included in the HTML interface of Cisco Secure ACS 3.3, use an English-language version of one of these tested and supported web browsers:
  • Microsoft Internet Explorer for Microsoft Windows
    • Version 6.0
    • Service Pack 1
    • Microsoft Java Virtual Machine
  • Netscape Communicator for Microsoft Windows
    • Version 7.1
    • Sun Java Plug-in 1.4.2_04
Several known problems are related to using Netscape Communicator with Cisco Secure ACS. For more information, please review Table 3 of the Release Notes.
  • Cisco does not recommend you use a slow network connection for remote access to the Cisco Secure ACS HTML interface. Some features that use Java applets do not operate optimally, such as the HTML pages used to configure Network Access Restrictions and Network Admission Control.
Cisco does not support other versions of these browsers or other Java virtual machines with these browsers. Cisco also does not test web browsers by other manufacturers.

Note: In order to use a web browser to access the Cisco Secure ACS HTML interface, configure your web browser with these settings:

  • Use an English-language version of a supported browser.
  • Enable Java.
  • Enable JavaScript.
  • Disable HTTP proxy.
ACS 4.0 and 4.1
  • Microsoft Internet Explorer 6 Service Pack 1 and 5.5 for Windows-English and Japanese version
  • Netscape Web Browser 7.0, 7.1, and 7.2 for Windows-English and Japanese version1

1Several known problems are related to using Netscape Communicator with ACS. For more information, refer to the Release Notes for Cisco Secure ACS for Windows.

Note these caveats as you work with ACS/CSNT and a web browser.

  • Java and JavaScript support must be enabled.

  • Proxy must be disabled.

  • Browser support is limited to browsers that run on PC platforms.

User Database Options

Version Compatible With
CSNT 2.3(x)
  • Cisco Secure User Database
  • Windows NT User Database
  • ODBC Database
  • MCIS LDAP Database
  • Novell NDS Database
  • Token Card Server User Databases
CSNT 2.4(x)
  • Cisco Secure User Database
  • Windows NT User Database
  • ODBC Database
  • MCIS LDAP Database
  • Novell NDS Database
  • Token Card Server User Databases
ACS 2.5(x)
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
ACS 2.6.1 - 2.6.3
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
  • These Novell Clients are supported:
    • Novell Client 4.6 (for Windows NT 4.0)
    • Novell Client 4.7 (for Windows 2000)
  • These Token Card servers have been tested with ACS 2.6(x):
    • AXENT Defender versions 4.0.3 and 4.1
    • Secure Computing SafeWord version 5.1.1 (This version of Secure Computing SafeWord runs only on Windows NT 4.0.)
    • Security Dynamics Inc. ACE/Server version 4.1 and ACE/Client version 1.1 for Windows 2000
    • CRYPTOAdmin version 5.0 (build 27)
ACS 2.6.4
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
  • Novell Client 4.8 and 4.8.1 for Windows NT 4.0 or Windows 2000
  • These Token Card servers have been tested with ACS 2.6(x):
    • AXENT Defender version 4.1
    • Secure Computing SafeWord version 5.2
    • Security Dynamics Inc. ACE/Server version 5.0 and ACE/Client version 1.1.2 for Windows 2000
    • CRYPTOAdmin version 5.0 (build 27)
ACS 3.0.1
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
  • Novell Client 4.8 for Windows NT 4.0 or Windows 2000
  • These Token Card servers have been tested with ACS 3.0.1:
    • AXENT Defender version 4.1
    • Secure Computing SafeWord version 5.2 (This version of Secure Computing SafeWord runs only on Windows NT 4.0.)
    • Security Dynamics Inc. ACE/Server version 4.1 and ACE/Client version 1.1.1 for Windows NT 4.0 and ACE/Server version 5.0 and ACE/Client version 1.1.2 for Windows 2000
    • CRYPTOCard Easy RADIUS 5.0 and 5.1 on a different server
    • ActivCard Token Server 3.1
    • Vasco Token Server
ACS 3.0.2
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
  • Novell Client 4.8 for Windows NT 4.0 or Windows 2000
  • These Token Card servers have been tested with ACS 3.0.2:
    • AXENT Defender version 4.1
    • Secure Computing SafeWord version 5.2 (This version of Secure Computing SafeWord runs only on Windows NT 4.0.)
    • ACE/Server version 5.0 and ACE/Client version 1.1.2 for Windows 2000
    • CRYPTOCard Easy RADIUS 5.0 and 5.1 on a different server
    • ActivCard Token Server 3.1
    • Vasco Token Server
ACS 3.0.3
  • Cisco Secure User Database
  • Windows NT/2000 User Database
  • ODBC Database
  • Generic LDAP
  • MCIS Database
  • Novell NDS Database
  • Token Card Server User Databases
  • Novell Client 4.8.3 for Windows NT 4.0 or Windows 2000
  • These Token Card servers have been tested with ACS 3.0.3:
    • AXENT Defender version 4.1.3
    • Secure Computing SafeWord version 5.2 (This version of Secure Computing SafeWord runs only on Windows NT 4.0.)
    • ACE/Server version 5.0 and ACE/Client version 1.1.2 for Windows 2000
    • CRYPTOCard Easy RADIUS 5.0 and 5.1 on a different server
    • ActivCard Token Server 3.1
    • Vasco Token Server 6.0.2
ACS 3.1(x)
  • Cisco Secure User Database
  • Windows 2000 User Database
  • ODBC Database
  • Generic LDAP (Netscape iPlanet Directory Server version 5.1 and Windows 2000 Active Directory with Windows Service Pack 3 were tested.)
  • MCIS Database
  • Novell NDS Database
  • Novell Client 4.8.3 for Windows 2000
  • Microsoft CA certificate server
  • Token-Card Server User Databases
  • These Token Card servers have been tested with ACS 3.1.1:
    • ActivCard Token Server 3.1
    • CRYPTOCard CRYPTOAdmin 5.16
    • PassGo (formerly AXENT) Defender version 5.16
    • RSA ACE/Server version 5.0 and ACE/Client version 1.1.2 for Windows 2000
    • Secure Computing PremierAccess Server version 3.1
    • Vasco Vacman Server version 6.0.2
ACS 3.2(x) Refer to the Supported and Interoperable Devices and Software Tables for Cisco Secure ACS for Windows Server version 3.2.
ACS 3.3(x) Refer to the Supported and Interoperable Devices and Software Tables for Cisco Secure ACS for Windows Server Version 3.3.
ACS 4.0 and 4.1 Refer to the User Databases of the User Guide for Cisco Secure ACS for Windows.

Note: In version 2.3, PAP authentication is supported for ODBC and MCIS user database with Cisco IOS® Software Releases 11.1 and later. CHAP, MS-CHAP, and ARAP are not supported with Cisco IOS Software Releases earlier than 11.2.

Hardware

This section specifies the hardware that is compatible with Cisco Secure ACS for Windows.

Version Compatible With
CSNT 2.3(x)
  • Pentium processor, 200 MHz or faster
  • Windows NT Server 4.0 operating system, English language version
  • 64 MB of RAM required, 128 MB recommended
  • At least 150 MB of free disk space
  • Minimum resolution of 256 colors at 800 x 600 lines
CNST 2.4(x)
  • Pentium processor, 200 MHz or faster
  • 64 MB of RAM required, 128 MB recommended
  • At least 150 MB of free disk space (If you are running your database on the same machine, more disk space is required.)
  • Minimum resolution of 256 colors at 800 x 600 lines
ACS 2.5(x) and 2.6(x)
  • Pentium II processor, 300 MHz or faster
  • 128 MB of RAM required, 256 MB recommended for Windows 2000 Server
  • At least 250 MB of free disk space (If you run your database on the same machine, more disk space is required.)
  • Minimum resolution of 256 colors at 800 x 600 lines
ACS 3.0(x) and 3.1.(x), 3.2(x), and 3.3(x)
  • Pentium III processor, 550 MHz or faster
  • 256 MB of RAM required
  • At least 250 MB of free disk space (If you run your database on the same machine, more disk space is required.)
  • Minimum resolution of 256 colors at 800 x 600 lines
ACS 4.0 and 4.1
  • IBM PC-compatible with Pentium IV processor, 1.8 GHz or faster
  • Color monitor with minimum graphics resolution of 256 colors at 800 x 600 resolution
  • CD-ROM drive
  • 100BaseT or faster connection

Related Information

Updated: Nov 21, 2007
Document ID: 14308