Chapter8 E stablishing CiscoSecure ACS System Configuration
CiscoSecure ACS Certificate Setup
8-68
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
78-13751-01, Version 3.0
Installing Cisco Secure ACS Certification with Automatic Enrollment You can use this process to install ACS certif ication using your e xisting Microsoft
enterprise CA.
Before You Begin
To employ the CiscoSecure ACS automatic certificate enrollment feature, the
following conditions apply:
•You must be using Microsoft Windows2000 Certificate Services
•Your CiscoSecure ACS must be installed on a Windows 200 0 server (not
Windows NT)
•Your CiscoSecure ACS must be part of the same domain as the Microsoft
enterprise CA, or it must belong to a domain that has a trust relationship with
the domain that the Microsoft Enterprise CA belongs to
•You must provide CiscoSecure ACS with an administrator login and
password for the domain to which Cisco Secure ACS belongs
To use automatic enrollment to install a new ACS certificate, follow these steps:
Step 1 In the navigation bar, click System Configuration.
Step 2 Click ACS Cert ific a te Se tup.
Result: Cisco Secure ACS displays the Install new certificate table on the ACS
Certificate Setup page.
Note If your Cisco Secure ACS has already been enrolled with a certificate, you
will not see the Install new certificate table. Rather, you would see the
Installed Certificate Information table.
Step 3 Select the Automatic certificate enrollment option in the lower portion of the
page.