Secure ACS 5.7 - adding a secondary server to primary

[dfoshager]

Good morning.

I recently setup two primary Secure ACS 5.7 servers. I want to make one of the primary servers a secondary server. When I attempt to do register to the primary, I receive the following message:

This System Failure occurred: Registration failed due to Invalid Certificate. Your changes have not been saved.

Both servers have valid certificates. But other than extending the validity of the cert, no other changes have been made.

Any ideas please?

Thanks,

Daniel

[Ivan Gonzalez · Accepted solution]

Hello Daniel,

For the trust communication option to work. It is necessary to use certificates signed by either an external or internal CA, and additional to this, you need to import the respective issuer  Root/intermediate CAs under "Users and Identity Stores>"Certificates Authorities" section on both ACS servers.

You can also choose not to use the "Trust communication" feature by going to "System Administration > Configuration > Global System Options > Trust Communication Settings." and uncheck the checkbox for the feature.

Note: Please mark answered if applicable.

Note

Note

[dfoshager]

Great advice. Thank you for your response. I was able to get this to work as hoped.

[Ivan Gonzalez]

Hello Daniel,

You are very welcome, I am glad you found it helpful.

Best regards,