topic I am had the issue with 5.5 in Network Access Control

ACS 5.2 EAP-TLS with external certificates.

jorge.novo — Mon, 11 Mar 2019 00:33:15 GMT

Hi,

I have created several server and client certificates of my EAP-TLS infrastructure.

With OpenSSL I have successfully installed de CA in the ACS:

Users and Identity Stores > ... > Certificate Authorities > Edit: "Ejemplo de Certificado de Servidor CA

Issued To: Ejemplo de Certificado de Servidor
Issued By: Ejemplo de Certificado de Servidor
Valid From: 21:21 04.11.2010
Valid To (Expiration): 21:21 03.01.2011
Serial Number: 8b8c79bb7a815d59

Also in the Wireless Client the same CA and the client certificate:

Now I must install de server certificate in the ACS, but with the different test I always obtain the same error:

"unable to parse certificate"

Without the server certificate in the ACS I always obtain the same error:

EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain

Cisco ACS VERSION INFORMATION
-----------------------------
Version : 5.2.0.26

server.crt
server.csr
server.key
server.p12
server.pem

Best Regards

Re: ACS 5.2 EAP-TLS with external certificates.

Yudong Wu — Fri, 05 Nov 2010 16:32:38 GMT

Did you try to generate CSR from ACS 5.2 itself and then use this CSR to get server certificate from CA server?

Re: ACS 5.2 EAP-TLS with external certificates.

Tiago Antunes — Mon, 08 Nov 2010 11:41:26 GMT

Hi,

The ACS certificate must respect the ACS requirements.

Supported certificate formats include, DER, PEM, or Microsoft private key proprietary format.

Please takea look into the config example https://supportforums.cisco.com/docs/DOC-13545 where it shows how to install a 3rd party cert into the ACS to be used for EAP-TLS.

You can also find other information at:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/admin_config.html#wp1052640.

HTH,

Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

ACS 5.2 EAP-TLS with external certificates.

Sandeep Verma — Mon, 03 Mar 2014 08:48:21 GMT

Hi,

Were you able to find a solution for this issue.

I am had the issue with 5.5

ted.schwind — Mon, 13 Apr 2015 16:04:09 GMT

I had the same issue with 5.5 and still having the issue after upgrading ACS to 5.6.