topic Re: https fails on ACS 3.3 solution engine in Network Access Control

https fails on ACS 3.3 solution engine

mchockalingam — Tue, 26 Mar 2019 00:23:47 GMT

Hi All,

I installed a self-signed certificate on the ACS solution engine running 3.3(3). I enabled https access for admin access. I do not have any restrictions as far as connecting IP. But when I try to connect, IE says "page cannot be displayed". However, firefox gives me an error message saying "invalid message authentication code". Anyone has experienced this?

thanks,

Re: https fails on ACS 3.3 solution engine

darpotter — Thu, 11 Jan 2007 10:25:09 GMT

Did https work before you installed the cert? Im not totally convinced csadmin uses the installed cert for https. I think that is for authentication only.

Re: https fails on ACS 3.3 solution engine

mchockalingam — Thu, 11 Jan 2007 14:22:37 GMT

I have another ACS box running 3.2(3). I installed s self-signed cert and enabled https. Now when I access the box for admin access, it redirects http to https and works fine.

I am trying exactly the same thing on this box running 3.3(3). In this box, I installed the cert for 2 reasons, one for admin access and the other for PEAP. Neither one works. But certificate is installed and status says OK.

Re: https fails on ACS 3.3 solution engine

pthome — Thu, 30 Aug 2007 15:14:48 GMT

Hi Meena,

Did you find the Problem why https did not work?

I also have this Problem now, but I have several other ACS Servers where https works fine.

Regards,

Peter

Re: https fails on ACS 3.3 solution engine

mchockalingam — Thu, 30 Aug 2007 15:48:34 GMT

I had to replace the box with another one.

Since I closed an existing session after turning on https without checking, I could not get to manage the box. Reimaging did not help either.

Re: https fails on ACS 3.3 solution engine

pthome — Thu, 30 Aug 2007 15:53:48 GMT

Thanks for the Answer. I have the Problem on a Win2003 Server and so I am able to change the REG Key for https to get the Sessions back without https - But we need https here. I'll try to also set up a new box.

Regards,

Peter