topic Re: ACS 5 EAP-TLS in Network Access Control

ACS 5 EAP-TLS

nhan.duong — Mon, 11 Mar 2019 00:19:35 GMT

How do we add a trust authority on ACS 5? We also get an error when the client authenticate by eap-tls.

12514 EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain this sound like the Trust Authority on client is not matchi with on ACS server , is that right?

Thanks,

Re: ACS 5 EAP-TLS

jorge.novo — Fri, 05 Nov 2010 13:25:35 GMT

Hi,

Seems to be that, or also you are not installed the CA in the ACS

CA Certificate

| ________ Server Certificate

|______________Client certificate

Ensure that the certificate authority that signed the client's certificate is correctly installed in the Certificate Authorities page (Users and Identity Stores: Certificate Authorities). Check the OpenSSLErrorMessage and OpenSSLErrorStack for more information. If CRL is configured, check the System Diagnostics for possible CRL downloading faults.

Un Saludo

Re: ACS 5 EAP-TLS

jedubois — Fri, 05 Nov 2010 17:41:52 GMT

You are correct, the ACS doesn't have the CA for the client certificate being presented. This can be added under Users and Identity Stores -> Certificate Authorties, If it is a multi-tiered CA you can add each certificate in the chain here.

--Jesse