In the Cisco ACS 5.x you import all the PKI's you will trust, never mind what root the ACS - certificat (wich is used to establishe the TLS tunnel) is descended from. May be, ACS 4.x did it in the same way? If you want to disclose the machines of the...

Hi Andy,Sorry, Im not very familiar with ACS 4.2, because we started with 5.0 (this Version supports 2048 key lenght). In ACS 5.x you have a link "LDAP" in the webinterface under the section "Users and Identity Stores", where you can define the speci...

Hi,I also configured an ACS (not 4.2 but 5.1) for machine authentication with 802.1x. I think Cert - Validation directly with the CA is'nt possible. You have to establishe a LDAP - Connection to a DC. If the Option "publish Certificate in Active Dire...