18-19
User Guide for Cisco Secure Access Control System 5.4
OL-26225-01
Chapter18 Managing System Ad ministration Configurations
Adding Local Server Certificates
Step4 Click Submit to extend the existing certificate’s validity.
The Local Certificate Store page appears with the edited certificate.
Related Topic
•Configuring Local Server Certificates, page18-14
Deleting Certificates
To delete a certificate:
Step1 Select System Administration > Configuration > Local Server Certificates > Local Certificates.
Step2 Check one or more check boxes next to the certificates that you want to delete.
Step3 Click Delete.
Step4 For confirmation, click Yes or Cancel.
Table18-17 Edit Certificate Store Properties Page
Option Description
Issuer
Friendly Name Name that is associated with the certificate.
Description Description of the certificate.
Issued To Display only. The entity to which the certificate is issued. The name that
appears is from the certificate subject.
Issued By Display only. The certification authority that issued the certificate.
Valid From Display only. The start date of the certificate’s validity. An X509 certificate
is valid only from the start date to the end date (inclusive).
Valid To (Expiration) Display only. The last date of the certificate’s validity.
Serial Number Display only. The serial number of the certificate.
Protocol
EAP Check for ACS to use the local certificate with EAP protocols that use
SSL/TLS tunneling: EAP-TLS, EAP-FAST, and PEAP.
Management Interface Check for ACS to use the local certificate for SSL client authentication.
Renew Self Signed Certificate
Certificate Expires On Display only. Date the certificate expires.
Renew Self Signed
Certificate
Check to allow the renewal of a self signed certificate that expired.
Expiration TTL Expiration TTL is the number of days, months, weeks, or years that you want
to extend the existing certificate for. Valid options are: one day, one month,
one week, and one year.
At a maximum, you can extend the certificate for a period of one year.