ACS SE upgrade questions

We currently have an ACS SE 1112 version 3.3.4.12. Windows Active Directory is being used to authenticate users.
We have a new ACS (1113 running 4.1.1.23.5) that will be replacing this one.
Regarding the new install, do I need to install a new remote agent to use with Active Directory? Also, can I use the same IP address for the new ACS SE that is being used for the one that will be replaced? We didn't want to change our switch and router configs if it isn't necessary. If it's possible just to set up everything on the new ACS SE and then unplug the old one and plug in the new one.
I am new to ACS and was not around when it was originally set up so sorry if these are dumb questions!
Please advise. Thanks so much.

It should work as long as you don't miss anything, and yes you are supposed to install an agent that matches the version you are running. You might want to go ahead and put the latest updates on the ACS before you put it into operation. The process is kind of different than other updates. You might want to read my other ACS posts. I recently killed one of my ACS boxes because I did not install the CSUPdate cumulative patch before installing the lastest patch of the same rev level. (i.e. read directions carefully). Make sure you do an FTP backup before updating the software. If anything goes wrong you could have to reimage the box. There were lots of bug fixes in the updates since 4.1.1.
Randy

Similar Messages

  • Security upgrade question - Getting 6.1.6 downloaded to iphone.

    Security upgrade question - I have a 4S phone v6.01 with an upgrade to IOS 7.04 already downloaded and ready for install.  I would like to install the 6.1.6 security upgrade instead. How do I delete the ios7 in the queue or have the 6.1.1 pushed as an option to the phone?

    You can't install iOS 6.1.6 on that device and must update it to 7.0.6.
    (101120)

  • I have an upgrade question. I received a notification when I connected my computer to the internet that Lightroom 5.7.1 was available

    I have an upgrade question. I received a notification when I connected my computer to the internet that Lightroom 5.7.1 was available it included HDR & Panoramic photo merge. I cant find these. Where do I find them.

    well that was a big waste of my time & data allowance then ...
    I live in a flaky slow internet area & I keep my photo edit machine off the internet unless & want to update something. CC is no use to me & that useless update just used up a 12th of my allowance for the year ...

  • Another RAM upgrade question

    Hi everyone,
    I know there seems to be lots of RAM upgrade questions here but hey thats what forums are for.
    I'm looking to upgrade my macbook's RAM it's currently got 2GB (2x1GB)
    Is it possible to purchase 1x4GB and put that with one of my current 1GB sticks to create a total of 5GB?
    I would be interested to know if this is possible or if anyone has tried it.
    Thanks in advance
    Scott

    This will work if your MacBook is late '07 or newer.

  • ACS 4.2 to 4.2.1 Upgrade Questions

    I have been tasked to upgrade our four ACS servers from
    4.2.1.15 to the latest version.  The ACS servers are
    applianced based.  I have browsed the download software page
    of cisco.com and have found this file:
    app/Acs_4.2.1.15.11.zip (ACS SE 4.2.1.15.11 cumulative
    patch).
    Can someone confirm if this is the latest/best file to download
    the latest 4.2 release of hardware based Cisco Secure ACS?
    For those who have upgraded to this latest release, can you
    comment on your experience regarding the upgrade process or
    ACS performance post-upgrade?  Any issues/caveats about the
    process or performance post-upgrade?
    Thanks in advance for any helpful information you can
    provide for this?
    Adil

    Hi Adil
    ACS  provides a migration utility to transfer data from migration-supported  versions of ACS 4.x to any ACS 4.x machine. The ACS migration process  requires, in some cases, administrative intervention to manually resolve  data before you import it to ACS.
    The Migration utility completes the data migration process in two phases:
    •Analysis and Export
    •Import
    In  the Analysis and Export phase, you identify the objects that you want  to export into 4.x. The Migration utility analyses the objects,  consolidates the data, and exports it.
    After  the Analysis and Export phase is complete, the Migration utility  generates a report that lists any data compatibility errors, which you  can manually resolve to successfully import these objects into new ACS.
    The  Analysis and Export phase is an iterative process that you can rerun  many times to ensure that there are no errors in the data to be  imported. After you complete the Analysis and Export phase, you can run  the import phase to import data into ACS.
    For complete step by step configuration, please go through this link:
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/common_scenarios.html

  • ACS Server Install Questions

    I have a remote site customer that is in the process of replacing their ACS servers,and have several questions:
    1) What version should we be installing?
    2) Where can we get a clean binary installer (or do we have to start with 3.x or 4.0 & upgrade-if upgrade, can we use latest patch installer, or do we have   to apply successive patches?)
    3) Cross-version replication? Current servers have Release 4.1(1) Build 23 Patch 5-do these need to be upgraded to current version, or can we install latest & replicate from current?
    4) Is it possible to use different DNS name (ex rtpacs.corpnet2.com) for website than server's 'real' name (ex. us2sawn00232.us1auth.xxxx.com)?
    5) How to use GSK-signed cert? Have tried previously & failed-anything special here?
    Thanks for any help you can give.
    RO

    I have a remote site customer that is in the process of replacing their ACS servers,and have several questions:1) What version should we be installing?
    2)
    Where can we get a clean binary installer (or do we have to start with
    3.x or 4.0 & upgrade-if upgrade, can we use latest patch installer,
    or do we have   to apply successive patches?)
    3)
    Cross-version replication? Current servers have Release 4.1(1) Build 23
    Patch 5-do these need to be upgraded to current version, or can we
    install latest & replicate from current?
    4) Is it
    possible to use different DNS name (ex rtpacs.corpnet2.com) for website
    than server's 'real' name (ex. us2sawn00232.us1auth.xxxx.com)?
    5) How to use GSK-signed cert? Have tried previously & failed-anything special here?Thanks for any help you can give.RO
    Hi Richard,
    For your queries for replication ACS should be of same version then only you can replicate between the ACS patner,If you have the same version then your first and third query got the answer.
    For your fourth query you can use DNS server to host your web servers like when ever user acces your web site traffic will land in your DNS server where it will redirect to original server for that DNS server should be authoritive server for your website.
    For clear binary installation i would suggest check out the this link http://openacs.org/forums/message-view?message_id=1245671 hope this helps.
    If helpful do rate the valauable post.
    Regards
    Ganesh.H

  • ACS Appliance Upgrade path

    I am seeing patches and CSUpdate files with the same release date. My current version is Acs-4.2.0.124.9-CSUpdate fix Base image 4.2.0.107, Appliance Management Software 4.2.0.124,
    Question is which patch do I apply, the Cumulative, the CSUpdate, or both. Do I need to apply them one after the other, or is the .12 patch a rollup that includes the fixes in the previous versions, 10 and 11.
    One other thing, other than physically going to the colo and reading it off the server itself, where can I find the serial number of the unit.

    Appliance serial number cannot be viewed via GUI or serial.
    For upgrading ACS always apply most recent patch available and it covers all fix till date.
    First apply csupdate and then apply patch.
    Please post ACS related under head AAA.
    Regards,
    ~JG
    Do rate helpful posts

  • ACS Express upgrade for native Linux OS

    I'm running ACS Express 5.0.0.18. A recent security scan flagged the ACS as running outdated versions of Apache and Tomcat, plus other issues. Will the 5.0.1.1 upgrade package perform an update on these components? If so, what will be the updated versions, given that the upgrade package is over one year old? Are there any other alternatives for bringing the OS components up to date? Any advice is appreciated.
    Regards,
    Mike

    Hi Mike,
    what are the exact vulnerabilities you're referring to?
    I ask this as there are some known issues affecting also the ACS Express version 5.0.1.1, such as the following ones:
    * CSCtg52362:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtg52362
    * CSCtg52369:
    http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtg52369
    We don't have precise ETA for the fix yet, but you may monitor the above bugs to get notified about updates.
    In any case, you have to wait for the next patch to be out to get this fixed.
    In the meanwhile I would also recommend to mitigate the impact of those issues by preventing non-admin workstations to have access to the ACS GUI (e.g. with a firewall or ACL); in any case this is good practise as these web pages should not be reachable for non-admin staff (nor external internet users of course).
    In any case, if you need for further assistance on this, please open a TAC case, so we can verify this in more details.
    Thanks!
    Regards,
    Federico
    If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

  • Windows 2003 SP2 upgrade question in regards to OSS 30478

    We are currently running our production system on a windows 2003 sp1 two-node cluster with SQL 2005.
    I would like to get it upgraded to SP2, but I have a question on OSS note 30478.
    There is a sentence in there stating:
    -Special features with Service Packs for Windows Server 2003 in the cluster:
    Service Pack 2: Before you import Support Package on platform x86_64, you must replace SAP resource DLL on both cluster nodes with the most current version.
    Can someone elaborate on "replace SAP resources DLL on both cluster nodes"?
    Does that just mean I need to upgrade the Kernel to the latest version?
    It seems to be a fairly bold statement with very vague instructions.  Anyways any guidance would be appreciated.

    for more details see note <a href="http://service.sap.com/sap/support/notes/1043592">1043592</a>
    peter

  • Satellite L50-A-19N HDD upgrade question

    Hi,
    I would like to upgrade the standard HGST HDD to a faster Seagate SSHD, and the problem is that in this model L50-A-19N there is no HDD cover, the whole laptop bottom must be removed like in this Link: [Video|http://www.youtube.com/watch?v=IG0lW7t92bI]
    My question is can I upgrade the Disk by Myself and if not what can I do to replace the Disk not losing the warranty. I read the manual for this model and there is nothing about HDD upgrades there.
    Regards.

    Usually on most notebook models HDD is placed at the bottom and access to it is not complicated. As you can see on your notebook model it is not so easy and HDD exchange is not supported. With other words it should not be done by notebook owner.
    Valid warranty is very important so please don't do anything on your own. HDD exchange in your case can be done by authorized service provider. If they do this warranty will not be cancelled.
    Contact nearest Toshiba service provider and ask for help. Addresses and phone numbers you can find on http://www.toshiba.eu/innovation/generic/ASP_SUPPORT/
    Good luck

  • Mid 2009 MacBook Pro 13 Hard Drive Upgrade Questions

    I bought an upgraded hard drive for my mid-2009 MBP 13. I've done some reading and it appears that my model of MBP shouldn't have drive issues, but I still have a few questions that I'm hoping someone will answer. Perhaps this will all boil down to a little knowledge is a dangerous thing. That is, I may be worried without good reason. If so, I apologize ahead of time.
    MacBook Pro 5,5
    2.26 GHz
    4GB RAM
    10.6.3
    Firmware version is: EFI64
    The stock drive is a TOSHIBA MK1655GSXF (160 GB):
    The new hard drive is the Western Digital Scorpio Blue 500 GB 5400 RPM drive.
    I noticed that the temperature seemed to spike after installing the new drive. I didn't get the temperature of the hard drive before I took it out, but the CPU was consistently around 170 degrees Fahrenheit and the fan was in the 2,800-2,900 RPM range.
    After putting the stock drive back in the MBP, the temps are consistently 142-145 degrees F for the CPU and 95-97 degrees F for the hard drive. The fan is right around 2,000 RPM.
    I've read a bit about outrageous load cycles and just wanted to check the numbers.
    The WD Scorpio Blue around 4,055 after 27 power on hours.
    The stock drive was at last count, at 206701 after 2215 power on hours.
    The machine is doing comparable things, downloading podcasts, Time Machine backups, browsing, etc.
    The general questions, I have are:
    Is the temperature supposed to spike like that when handling a larger drive?
    If so, what is a reasonable range? I know I don't have the temperature of the new drive, but if I knew what to expect, I guess I would be more confident putting the new drive back in and not returning it.
    What's a normal/healthy/reasonable (don't really know the term I'm grasping for) load cycle to see? I divided the load cycles by the number of power on hours and get around 150 for the WD and 93 for the Toshiba. Are either of those outrageously good or bad? I haven't been able to tell in my reading.
    The bottom-line questions are:
    Am I just overreacting based on what I've read? Or, is something not kosher and should I return the new drive and get something else? Should I try hdapm or something? If I should return the drive, any recommendations?
    I've talked your collective ear off, I'm sure.
    Thank you in advance for your responses.
    Cheers,
    Rob

    For what it's worth I've put aftermarket 7200 rpm hard drives in 2006 and 2008 15" MBP's and also a WD Scorpio Black 320GB in a 2009 13" MBP 2.53GHz and have had no changes in cpu temp or fan speed. Your fan speeds and cpu temp with the new drive sound too high. Something else is going on here. The temp is not supposed to spike when handling a larger drive. Maybe it's something like
    Spotlight indexing the new drive? Have a look at your Activity Monitor for an active process drawing resources with the new drive.

  • Visual Studio 2005/2008 and Crystal Reports versions/upgrade questions.

    I've tried posting this question on the MSDN forums and gotten no response. 
    I've downloaded and installed VS 2008 Beta 2.   The versions on the Crystal Reports files included are 10.5.0.1806  
    I'm currently using VS 2005, with the included Crystal Reports.  The versions on those files are 10.2.0.xxxx.  I've created an desktop app (in VB) which stores it's data in a database and uses the CR 10 runtime merge modules to generate a report.
    I was considering upgrading the Crystal Reports version to XI.  I would like to allow customers to modify my delivered report with their own licensed copy of CR XI.  I am not providing any functionality within my app to create or modify the delivered .rpt or use it outside my application.
    Questions:
    Do I need to update the runtime files to CR XI to support rpt files modified with CR XI?  Current runtime files are being delivered with the CR 10 merge module.
    I see a Crystal Reports for Visual Studio upgrade to CR XI. 
    Can I update the merge modules to CR XI and still use the CR for VS2005 for development?
    Does it make any sense to update CR for VS 2005?  Or to get the full CR XI Developer edition?  My usage of CR functionality is very limited.
    Would there be any benefit to waiting for the release of VS 2008?   How does that change the scenario?
    How does Crystal Reports for Visual Studio fit in with the Crystal Reports Lifecycle?  It's not mentioned on Business Objects End of Life Dates page . Crystal 10 has a Patch EOL of 31-Dec-07.   Does this apply to CR for VS 2005?  Where does 10.5 fit in?
    My main concern is allowing customers with CR XI to change the format of my delivered .rpt to run with my app.  Adding their company name, logo, etc.   My testing show a CR XI report still works with my current app.  But, going forward, what should I deliver and what do I need to use to continue development?

    To use Reports designed in XI, you need to use XI or higher runtime, running them in older versions may work, but you may encounter unforeseen issues doing so.
    If you are to use VS2005 for development you need to use XI Release 2 (11.5) runtime.
    If you are going to use VS2008 for development you need to use Crystal Reports 2008 with Service Pack 0.
    The support end of life for versions of Crystal Reports bundled with Visual Studio are linked to what Microsoft's lifecycle for the product is.  Generally if there is a workaround for the issue that is simple enough, there will not be a patch created.
    The changes you are expecting the customer to do can be accomplished with our RAS SDK which is available without using enterprise starting with Crystal Reports XIR2 SP2.

  • Ultimate 3B Monitoring Prorated Upgrade Questions!?

    I recently enrolled in the 3 Credit Bureau Monitoring for $24.99/Month on June 24 (almost 3 weeks ago). I got a message at the bottom of my Dashboard saying I could upgrade to the 3B Ultimate at a prorated price, since it hasn't been a month. It says you get a fresh report from all 3 Credit Bureaus quarterly, which is worth the extra $5/month for me, so I am going to do it here in the next 24-48 hours.... But my question is will it provide a "newer" or more accurate score than what I already have? It says that they have to pull the information again, and my score has been on a great climb in the 3 weeks I've been enrolled. I've got some things that haven't updated on Transunion FICO, but have on the other 2. Any help/experience is greatly appreciated!

    Just want to give an update. It's been about 1 week and I've had no problems. Signing in and out of Win 7 is very fast. Much better than with XP. Even though I have a slower hard drive with Windows 7 (5400 RPM) vs Windows XP (7200 RPM), Windows 7 is faster. Startup time is about the same, but shutdown is a lot faster, just like signing and out and logging in and out.
    Wireless LAN (WLAN) configuration was painless and has worked well. It automatically reconnects when I boot and does not drop my connection when i stay logged in but switch users (this happened to me on XP with the IBM Access software).
    It has been well worth the upgrade so far.
    Systems I use: T42P, T61P, Y510, A600

  • Upgrade question on WSC4507R-E

    HI all,
    I have a couple questions about upgrading the IOS on our WS C4507R-E.    We have 3 installed cards:
    2 WS-X45-SUP6L-E supervisor modules running 12.2(54)SG  * running Active/Standby
    1 WSX4606-X2-E 10G card
    ROMMON is currently at  12.2(44r)SG5
    I'm a bit confused by all the available IOS "trees" but I am pretty sure I want to upgrade to: 15.0.2-SG9(MD), at least that is what is recommended when I search for IOS downloads.  I don't think I need to upgrade ROMMON, I believe I'm at the minimum required version for this IOS.  I may upgrade ROMMON after IOS, there was a note about not doing it first on older IOS versions.
    So, my questions are....is the above info correct, regarding ROMMON and the recommended IOS version for my platform?
    If so, how would I do the upgrade on the redundant sup modules?  The instructions I found didn't address redundant sups.
    Anything I need to be aware of that I haven't mentioned?
    Thanks for any assistance you can provide!

    Hi Eric,
    There are 2 ways to upgrade:
    1-Load the IOS version you want to both Sups, change the boot variable, so the switch can load the new IOS after the reboot and finally reboot the chassis.
    2-Use ISSU  see link:
    http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/prod_white_paper0900aecd806f0663.html
    As for the ROMMON, you usually don't need to upgrade it often and you can always do that later if you need to.  I think, some of the newer versions of IOS upgrade the ROMOM as well as the main image but I am not sure exactly for what platforms.
    HTH

  • Another "using another person's upgrade" question

    Sorry in advance if this question has been covered 100 times before.  I spent some time trying to find an answer that fits my scenario in the forums but didn't find an exact fit.
    My Droid Incredible touch screen stopped working this past week (no drops, no water, no reason to stop working) and since I am 1yr and 3months into owning the device and have no insurance the local store said I'm pretty much SOL and to contact HTC.  Dealing with HTC has been the worst customer service experience of my life and they pretty much said the same thing since they only cover their devices for 1 year.  (Said I could send it in to their repair facility on my dime for 2 weeks minimum and they would determine the repair cost and contact me).  So I can't upgrade until April on my account and am trying to figure out a way to get a new phone (not at full price).
    My girlfriend has been up for an upgrade for months now (she uses a basic phone, no data) and isn't in any hurry to use it.  She does't ever want a smart phone and said that I should just use her upgrade.  So, the details and questions are as follows:
    1. We are not on the same account (family plan).  We have individual plans.  My plan is 400 or so mintues of talk and unlimited data.  Her plan is 400 minutes or so of talk.
    2. I would like to use her upgrade to get an iphone 4s.
    3. We do not want to change her plan (its something like $30 a month grandfathered plan).
    4. I would like to keep my current plan as well.  (unlimited data)
    Is it possible to make all of these things happen?  I have read that it is simple if you are on a family plan to do this.  Can we go down to the local store and get an iphone 4s and activate it on my account instead of hers?
    As a side question (and to make things more complicated)... Does anyone know if we can we combine our accounts together into 1 account and save money or minutes.  We both hardly use our minutes at all and aside from me using the data plan for work we toss out hundreds of minutes per month.
    Thanks in advance for any replies!
    J

    jmskennedy wrote:
    Sorry in advance if this question has been covered 100 times before.  I spent some time trying to find an answer that fits my scenario in the forums but didn't find an exact fit.
    My Droid Incredible touch screen stopped working this past week (no drops, no water, no reason to stop working) and since I am 1yr and 3months into owning the device and have no insurance the local store said I'm pretty much SOL and to contact HTC.  Dealing with HTC has been the worst customer service experience of my life and they pretty much said the same thing since they only cover their devices for 1 year.  (Said I could send it in to their repair facility on my dime for 2 weeks minimum and they would determine the repair cost and contact me).  So I can't upgrade until April on my account and am trying to figure out a way to get a new phone (not at full price).
    My girlfriend has been up for an upgrade for months now (she uses a basic phone, no data) and isn't in any hurry to use it.  She does't ever want a smart phone and said that I should just use her upgrade.  So, the details and questions are as follows:
    1. We are not on the same account (family plan).  We have individual plans.  My plan is 400 or so mintues of talk and unlimited data.  Her plan is 400 minutes or so of talk.
    2. I would like to use her upgrade to get an iphone 4s.
    3. We do not want to change her plan (its something like $30 a month grandfathered plan).
    4. I would like to keep my current plan as well.  (unlimited data)
    Is it possible to make all of these things happen?  Yes.  I have read that it is simple if you are on a family plan to do this.  Can we go down to the local store and get an iphone 4s and activate it on my account instead of hers? Most likely - if it is a corporate store.  If it's an "authorized reseller" or a third party store, it amy be more difficult and they may tell you they can't do it.
    As a side question (and to make things more complicated)... This MAY make it more simple!  Does anyone know if we can we combine our accounts together into 1 account and save money or minutes.  We both hardly use our minutes at all and aside from me using the data plan for work we toss out hundreds of minutes per month.
    You can get a family plan with 700 shared minutes, 2 lines, for $70, and the data plan on your phone would be $30.  I'm not sure if you would be able to keep your unlimited data though - you might be if you do this in stages.  First, combine your two accounts into one family plan and do nothing about upgrading for now.  Let that "settle"; your upgrade dates and eligibilities will remain the same as they were on your individual plans.  If you can make this transition and keep your unlimited data, then you're good to go upgrade the eligible line (your girlfirend's) to the iPhone, but activate it on your line.  Her line's contract will be extended for two years, but she can use her old phone and you can use the iPhone.  If the unlimited data did carry over, it will remain for the iPhone too.
    Thanks in advance for any replies!
    J

Maybe you are looking for