ssl certificate upload on acs appliance

[sansarav720e]

Hi All ,

              I have SSL certificate issued to my acs appliance by a CA authority , I need to upload this SSL certificate on acs applliance , I have followed below step to upload the certificate from ftp server .

1.Choose System Configuration > ACS Certificate Setup.
2.Click Install ACS Certificate.
3.Choose the Read certificate from file option and then click the Download certificate file link.

I have seen private key file window

           I dont have private key file issued by CA authority ,whether private key file is required during ssl certificate upload on acs appliance ,Why this private key file is used .This private key file is any were used for EAP-TLS authentication.

Note : SSL certificate issued by CA authority is being used on acs 3.3 server , we have downloaded this ssl certificate from acs 3.3 server. I dont see private key on my acs 3.3 server.

[andamani]

Hi,

The certificate will have two keys private key and public key. The private key is private to the ACS Server but the public key is open to anyone who is trusted by the CA.

You will define the path to the private key while generating a CSR. you need to enter the same filename and path in here.

The above is true for certificates in PKCS7 or PKCS#10 format.

But if the certificate is in PKCS#12 format, then you can install it straight away.

Keys are not used only for EAP-TLS. They are a requirement as per the PKI system. A cert will not get installed  without priavte key if in format .cer or .der

The following link will guide you to installation process.

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a0080545a29.shtml#t8

Hope this helps.

Regards,
Anisha

P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

[sansarav720e]

Hi Anisha ,

                  Thanx for your postings , I have exported this ssl certificate from my old acs 3.3 server from acsstore folder which is issued by CA authority which is used for EAP-TLS authentication . I need to reuse this certifcate on my ACS appliance for EAP-TLS authentication ,  How to understand from the certifcate has both private key & public key , Similarly what to be done for private key .

                   Kindly suggest me over here , Similalry how to understand the SSL certficate is PKCS7 or PKCS#10 format. Your help is highly appercitated  on this .