11-12-2009 12:29 AM - edited 02-21-2020 03:47 AM
Hello there,
I installed NAC and cutover to production env. without changing the perfigo root certificate. This is because i had no CA server.
Now i've got a win 2003 Standalone root CA Server configured. What is the impact on requesting certificate from this CA and install it on the NAC server and Manager?
regards,
Stanslaus.
11-12-2009 07:38 AM
Stanslaus,
No impact if you do it right. Details on adding a cert from 3rd party (in this case your own CA)
CAS: http://tinyurl.com/yju2jcy
CAM: http://tinyurl.com/yglhq3w
This is assuming 4.5
HTH,
Faisal
11-12-2009 11:02 PM
Thanks Faisal.
I have tried to access the links but i'm getting the bellow message from both URLs.
Forbidden File or Application
The file or application you are trying to access may require additional entitlement or you are trying to access a file with an invalid name. Additional entitlement levels are granted based on a users relationship with Cisco on a per-application basis.
If you feel you have reached this page in error, please try one of the following methods to locate your document:
1. If you are manually entering the URL into your browser location bar, be sure to include the file name of the page you are trying to access (file names typically end in .htm, .html or .shtml).
2. Use the Search feature located in the upper right section of this page.
3. Return to the Cisco.com Home or select a primary site area from the top navigation bar.
4. Consult with your Cisco Account Manager to confirm you have the appropriate entitlement to access this page.
If you would like to contact someone about this problem, please click on the Contacts & Feedback link below.
11-13-2009 06:34 AM
Clear your cookies in the browser and try again. I've seen that before and clearing cookies helps. If that still doesn't help let me know and I'll send you a PDF of the relevant portion
Faisal
11-13-2009 07:49 AM
Hi Faisal,
I've cleared cookies but no success. I've tried 3 different browsers also(Int expl, firefox and Epiphany) but ending up with the same message.
regards,
Stanslaus.
11-16-2009 05:57 PM
Stanslaus,
Within the URL try changing the word partner to customer and try again.
If that still doesn't work, email me and I'll send you the relevant portion in PDF
HTH,
Faisal
11-26-2009 12:02 AM
Hi Faisal,
I managed to install certificates from my internal CA Server and remove the perfigo certificate. The problem is that users are still required to accept the certificate everytime they login.
regards,
Stanslaus.
11-26-2009 11:57 AM
Stanslaus,
Is the root certificate (from the CA which issued the CAS/CAM certs) installed on the clients? If not, can you please install that root cert on the clients and try again?
HTH,
Faisal
11-27-2009 09:20 AM
Hello,
We have deployed a similar scenario and we solved this issue by installing an ID cert of every PC; the ID cert of course was issued by the same CA Authority used by the NAC Servers.
Hope it helps.
DL.
11-29-2009 10:46 PM
Hi Denis/Faisal,
I accessed the CA web from one of PCs giving the warning and found a place to install ceritficate chain ( written "To trust certificates issued from this certification authority, install this CA certificate chain."). I click install and it was successfully installed. The PC keeps on giving the warning. Is this the correct way of installing the root certificate on PC? If not please where can i find a guide on how to request the certificated from the CA?
Thanks.
Stanslaus.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide