ACS Solution Engine (Appliance) for HTTPS Management Configuration Example [Cisco Secure Access Control Server Solution Engine]

Document ID: 49941

PDF Downloads

ACS Solution Engine (Appliance) for HTTPS Management Configuration Example

Related Discussion

Introduction
Prerequisites
      Requirements
      Components Used
      Conventions
Configure
Verify
Troubleshoot
      Known Issue
Cisco Support Community - Featured Conversations
Related Information

Introduction

This document describes how to set up the Cisco Secure ACS Solution Engine (SE) for HTTPS management.

Prerequisites

Requirements

Ensure that you meet this requirement before you attempt this configuration:

Web administration access to both the Cisco Secure ACS SE and the Microsoft CA server

Components Used

The information in this document is based on these software and hardware versions:

Cisco Secure ACS SE 3.2.2. build 5
Microsoft 2000 Stand Alone CA server
Microsoft 2000 Enterprise CA Server

The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.

Conventions

Refer to the Cisco Technical Tips Conventions for more information on document conventions.

Configure

This document uses these configurations steps:

Login and click System Configuration.
Click ACS Certificate Setup.
Click Generate Certificate Signing Request.
Fill out the form as you see here, click Submit, and note that your Certificate Signing Request is now ready by viewing it on the right-hand side of the window.
Copy the Certificate Signing Request to a Notepad file for use during a later step.
Browse to your Microsoft CA Server web page.
Select Retrieve the CA certificate or certificate revocation list to download the CA Server Certificate.
Click Next.
Select Base 64 Encoded.
Click Download CA certificate.
Click Save and rename the CA Server Certificate from certnew.cer to a name that is easy to remember. This example uses ca-cert.cer. After the file is renamed, save this ca-cert.cer to the FTP server's root directory.
Browse back to the CA Server's web page.
Click Next and select Advanced Request.
Click Next and select Submit a certificate request using a base64 encoded PKCS #10 file or a renewal request using a base64 encoded PKCS #7 file.
Click Next and paste in the Certificate Service Request that you copied to a Notepad file from step 6.
Click Submit.
Select Base 64 encoded and click Download CA certificate.
Click Save and rename this certificate from certnew.cer to a name that you can remember. This example uses acs-cert.cer. Save this file to your FTP server's root directory.
In your ACS Server browse to System Configuration > ACS Certificate Setup > ACS Certification Authority Setup, click Download CA certificate file, and fill out the Download File section completely.
Click Submit.
Click Submit again.
Select System Configuration > ACS Certificate Setup > Install ACS Certificate and click Download certificate file.
Fill out the Download File section completely.
Click Submit.
Click Submit.
Select System Configuration > ACS Certificate Setup > Edit Certificate Trust List and verify your CA server is listed. Once it is found, check the box next to the name.
Click Submit.
Select System Configuration > Service Control and click Restart.
Select Administration Control > Access Policy and under the HTTP Configuration section under Secure Socket Layer Setup, check Use HTTPS Transport for Administration Access. Once this is complete click Submit. Your ACS SE is now able to be used via an SSL browser session.

Cisco Secure Access Control Server Solution Engine