<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: NAC framework deployment in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696205#M806718</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;CTA 802.1x supplicant uses only EAP-FAST.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So On the client you need to either uncheck "validate server certificate" on take the ACS Certificate/Root certificate of the CA Server and add it in the store. To add in the store use :-&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ctacert /ui 5 /add "path to certificate" /store "root"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Vivek&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Mon, 05 Mar 2007 14:46:19 GMT</pubDate>
    <dc:creator>Vivek Santuka</dc:creator>
    <dc:date>2007-03-05T14:46:19Z</dc:date>
    <item>
      <title>NAC framework deployment</title>
      <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696204#M806717</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have a problem with the NAC deployment.&lt;/P&gt;&lt;P&gt;Currently i try to setup the lab for deploy 802.1x solution. &lt;/P&gt;&lt;P&gt;I have follow the step configure the NAD (switch), ACS,....but i still receive the error message that mention i don't have certificate in personal store as credential for authentication.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Anyone can help? &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 09:26:04 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696204#M806717</guid>
      <dc:creator>chenyokechuan</dc:creator>
      <dc:date>2020-02-21T09:26:04Z</dc:date>
    </item>
    <item>
      <title>Re: NAC framework deployment</title>
      <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696205#M806718</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;CTA 802.1x supplicant uses only EAP-FAST.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;So On the client you need to either uncheck "validate server certificate" on take the ACS Certificate/Root certificate of the CA Server and add it in the store. To add in the store use :-&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ctacert /ui 5 /add "path to certificate" /store "root"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Vivek&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 05 Mar 2007 14:46:19 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696205#M806718</guid>
      <dc:creator>Vivek Santuka</dc:creator>
      <dc:date>2007-03-05T14:46:19Z</dc:date>
    </item>
    <item>
      <title>Re: NAC framework deployment</title>
      <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696206#M806719</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks for help, may i know how to disable "validate server certificate" on the CTA agent? For the CA, it is MUST be a root CA? if i plan to test it on lab environment, can i setup a standalone/standard CA?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Chen&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 06 Mar 2007 01:02:47 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696206#M806719</guid>
      <dc:creator>chenyokechuan</dc:creator>
      <dc:date>2007-03-06T01:02:47Z</dc:date>
    </item>
    <item>
      <title>Re: NAC framework deployment</title>
      <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696207#M806720</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Chen,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You can setup a standalone CA or even use the self signed certificate from ACS.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;P&gt;Vivek&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 06 Mar 2007 13:26:49 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696207#M806720</guid>
      <dc:creator>Vivek Santuka</dc:creator>
      <dc:date>2007-03-06T13:26:49Z</dc:date>
    </item>
    <item>
      <title>Re: NAC framework deployment</title>
      <link>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696208#M806721</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Vivek,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks a lot, i will try it.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;Chen&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 06 Mar 2007 14:47:49 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/nac-framework-deployment/m-p/696208#M806721</guid>
      <dc:creator>chenyokechuan</dc:creator>
      <dc:date>2007-03-06T14:47:49Z</dc:date>
    </item>
  </channel>
</rss>

