topic Re: ACS Self Signed in Network Access Control

ACS Self Signed

ricardorojas123 — Fri, 21 Feb 2020 18:25:30 GMT

The duration of the certificate of the ACS is one year. This means I have to install the new certificate in workstations, again?? Or only create the new certificate again in the ACS??

Re: ACS Self Signed

Nicolas Darchis — Tue, 16 Nov 2010 07:41:21 GMT

Hi,

yes it means you will have to re-install it on the clients. This is why self-signed certificates are not the best solution with regards to admin overhead.

The best for you would be to setup a CA (openssl, windows server, ...) that issues a certificate to ACS. You could renew the ACS certificate and not change anything to the clients since they trust the CA (and thus all the servers who have a cert of that CA).

Hope this helps.

Nicolas

===

Don't forget to rate answers that you find useful

Re: ACS Self Signed

Tiago Antunes — Tue, 16 Nov 2010 08:37:36 GMT

The ACS cert is only needed on the clients if you have the clients trusting the ACS certificate.

For example if you are using PEAP or EAP-TLS and trusting the Server cert.

If you do not have this constraint then you do not need to install the ACS cert on the clients.

You only need to create the ACS cert again.

HTH,
Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.