D-43
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix D CSUtil Database Utility
PAC File Generation
Generating PAC Files
Note If you use the -a or -g option during PAC file generation, CSUtil.exe restarts the
CSAuth service. No users are authenticated while CSAuth is unavailable.
For more information about PACs, see About PACs, page 10-17.
To generate PAC files, follow these steps:
Step 1 Use the discussion in PAC File Options and Examples, page D-41, to determine
the following:
•Which users you want to generate PAC files for. If you want to use a list of
users, create it now.
•What password you want to use to protect the PAC files you generate. If
necessary, create a password. We recommend passwords that are long, use
uppercase and lowercase letters, and include numbers.
•The full path to the directory you want the PAC files to be created in. If
necessary, create the directory.
Step 2 On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe.
Step 3 Type
CSUtil.exe -t additional arguments
where additional arguments represents at least one option for specifying which
users to generate PAC files for. You can also use the options to specify filepath
and password.
Press Enter.
CSUtil.exe generates the PAC files for each user specified. The PAC files are
named with the username plus a “.pac” file extension. For example, a PAC file for
the username seaniemop would be seaniemop.pac and a PAC file for the
domain-qualified username ENGINEERING\augustin would be
ENGINEERING_augustin.pac.