topic ACS5.3: https access stopped working in Network Access Control

ACS5.3: https access stopped working

joopv — Mon, 11 Mar 2019 03:08:03 GMT

For some reason i can't get access anymore to the web interface of our ACS 5.3 appliance.

Where i used to get a certificate warning first, and after that the ACS5 login screen, i now get totally no response anymore in my IE browser.

I can telnet to port 443 of the unit however. And i (fortunately) still have ssh access to the unit. So i did a reload (sorry, microsoft habits) but that did'nt solve anything.

https access to other systems from the same browser is functioning fine

=================================

admin# sh ver

Cisco Application Deployment Engine OS Release: 1.2
ADE-OS Build Version: 1.2.0.228
ADE-OS System Architecture: i386

Version information of installed applications
---------------------------------------------

Cisco ACS VERSION INFORMATION
-----------------------------
Version : 5.3.0.40.8
Internal Build ID : B.839
Patches :
5-3-0-40-5
5-3-0-40-8

=================================

ACS5.3: https access stopped working

Jatin Katyal — Tue, 26 Feb 2013 14:01:29 GMT

What version of IE are you using? Newer version of IE will not allow you to open secure pages that have less cipher strength.

Have you tried any other browser? In case it works fine with firefox or google chrome the please follow the below listed steps:

There might be a possibility that you downloaded and applied some windows update on your machine and that might have changed the cipher strength of minRSAPubKeyBitLength REG_DWORD from 512 to some higher value.

The below listed command will set the windows registry back to 512

Go to PC from where you are accessing ACS > Start > run > cmd > run the below listed command

C:\Users\Employees>certutil -setreg chain\minRSAPubKeyBitLength 512

Once you're done, try again and let us know.

Jatin Katyal
Regards,

- Do rate helpful posts -

ACS5.3: https access stopped working

joopv — Tue, 26 Feb 2013 15:43:28 GMT

Thanks - after installing firefox i can get https access to our box again.

I used IE8 so far. The certutil utility does not seem to work due to a rights issue.

ACS5.3: https access stopped working

Jatin Katyal — Tue, 26 Feb 2013 16:26:42 GMT

Good to see that.

Jatin Katyal

- Do rate helpful posts -

ACS5.3: https access stopped working

joopv — Wed, 06 Mar 2013 13:35:35 GMT

Our issue is solved (or workaround) by using Firefox.

But can we also install a 1024 of 2048bit keylength certificate on the ACS?