cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1033
Views
0
Helpful
1
Replies

ACS 5.3 / Self Signed / Certificate base auth

Hello,

Our ACS (5.3) has self signed certificate, we have exported it and declared it in Certificate Authorities.

We have exported it to have a Trusted Certificate for client machine.

This certificat has been installed on a laptop.

The wlc is successfully setup for eap (peap & eap-fast has been tested > ok)

I have this error in the log:

12514 EAP-TLS failed SSL/TLS handshake because of an unknown CA in  the client certificates chain

I think the Access Policies (identity & authorization) are misconfigured:

> I allowed Host Lookup, PAP/ASCII, MSCHAPV2, EAP-MD5, EAP-TLS, PEAP, EAP-FAST

> Identity: System:EAPauthentication match EAP-TLS

id Source: AD in which AD, Internal Users, Password based, certificate based CN Username are enabled

> authorization: System:WasMachineAuthenticated=True

Thanks for your help,

regards,

1 Reply 1

Hello,

I found the answer here:

https://supportforums.cisco.com/message/1298039#1298039

ACS self-signed certificate is not compatible with EAP-TLS

Thanks,

Review Cisco Networking for a $25 gift card