How to monitor a certificate period validity installed on the ACS ?

Hello,
I have to monitor a certificate period validity installed on the ACS with Centreon.
Someone can help me ?
Thanks,
Regards,
Oliver.

Step 1 In the navigation bar, click System Configuration.
Step 2 Click ACS Certificate Setup.
Cisco Secure ACS displays the Installed Certificate Information table on the ACS Certificate Setup page.
Note If your Cisco Secure ACS has not already been enrolled with a certificate, you do not see the Installed Certificate Information table. Rather, you see the Install new certificate table. If this is the case, you can proceed to Step 5.
Step 3 Click Enroll New Certificate.
A confirmation dialog box appears.
Step 4 To confirm that you intend to enroll a new certificate, click OK.
The existing Cisco Secure ACS certificate is removed and your CTL configuration is erased.
Step 5 You can now install the replacement certificate in the same manner as an original certificate. For detailed steps, see Installing a Cisco Secure ACS Server Certificate.

Similar Messages

How to check which version of Jdk installed on the machine?

How to check which version of Jdk installed on the machine?
& Which version of Oracle Insatlled on my machine?

String version = System.getProperty("java.version"); %

How can I realize a period process chain start: the 1st to 3rd day every?

Hi,All
I want to set a start in a process chain as the following:
a period value: the 1st to 3rd day every month
How can I realize it ? Thanks.
Best Regards
Jiande Ding

Hi Jiande Ding
create original chain as a Meta chain.
create the another process chain with immedaite in start varaint..
and put abap step in that PC after process chain..
put this below code in that abap program.
DATA: wwdate like sy-datum,
          WWDAY(2).
wwday = sy-datum+6(2).
IF WWDAY EQ '01' OR WWDAY EQ '03'.
   CALL FUNCTION 'RSPC_API_CHAIN_START'
EXPORTING
    I_CHAIN             = <ur meta chain tech.name>
ENDIF.
Edited by: shanthi bhaskar on May 5, 2009 4:44 PM

How to use Fonts which are not installed on the users computer?

I need to use various fonts in an applet without forcing the user to install them. I have found this method
createFont(int fontFormat, InputStream fontStream)
Returns a new Font with the specified font type and input data.
How can I use this or any other routines to catch the font placed somewhere on the internet?
Sincerely,
Trevor Hardcastle

In java 1.3.1, the type parameter has to be Font.TRUE_TYPE, which just leaves you with the problem of determining the correct fontStream parameter. You can easily obtain an InputStream for a remote resource by creating a URL to the resource (which presumably must specify a .TTF font file), and then using the method URL.openStream().
Be aware, however, that if you want to access URLs from within an applet, then there are security implications of trying to retrieve data from remote machines other that the one directly hosting the applet (read up on applets and security policies).

Re-installing certificate, says "Already installed...

1. I installed a certificate that for some reason didn't work so
2. I deleted the certificate again from the certificate list
3. Now I'm trying to re-install the same certificate
4. My E65 says "Certificate already installed. New certificate not saved."
Any ideas on how to make the phone accept this certificate?
Thx,
// Mads

Aah... solved!
Turned out the certificate WAS indeed installed on the phone. I just had a slightly different name.
So if you get this error, double-check the CONTENTS of the certificate you're trying to install.
All systems go!
// Mads

How do I get certificate authentication working across multiple domains?

Hi,
I've got LC ES2 set up for certificate authentication and when there's only one domain (with a single certificate mapping set up), it works fine.
However would like to have multiple domains (application specific), with a small set of administrator type users who manage all of the domains.
To test, I've set up two domains, with the admin users in one and the normal users in the other.
I've set up two certificate mapping rules (both for the same CA), one for each domain.
However LC will only authenticate users who are matched using the first certificate mapping rule.
Has anyone else seen/tried this? Have I missed something obvious?
For the moment I'm going to have to work with a single domain, which is a pain, but will have to do for now.
Thanks
Craig
Here's the error I get when LC fails to match (or attempt to match?) on the second cert mapping rule:
2010-05-11 11:23:41,331 WARN [com.adobe.idp.um.businesslogic.authentication.AuthenticationManagerBean] Authentication failed for (Scheme - Certficate) Reason: Certificate Authentication failed since no user exists in the system that satisfies the certificate mapping . Refer to debug level logs for category com.adobe.idp.um.businesslogic.authentication for further details
2010-05-11 11:36:38,835 WARN [com.adobe.idp.um.businesslogic.authentication.AuthenticationManagerBean] Authentication failed for (Scheme - Certficate) Reason: Certificate Authentication failed since no user exists in the system that satisfies the certificate mapping . Refer to debug level logs for category com.adobe.idp.um.businesslogic.authentication for further details
2010-05-11 11:36:38,885 ERROR [STDERR] 11/05/2010 11:36:38 AM com.adobe.rightsmanagement.webservices.rest.RestServlet doAction
SEVERE: Unexpected exception in Rest Call
com.adobe.idp.um.api.UMException| [com.adobe.idp.um.api.impl.AuthenticationManagerImpl] errorCode:16423 errorCodeHEX:0x4027 message:Authentication failed for (Scheme - Certficate) Reason: Certificate Authentication failed since no user exists in the system that satisfies the certificate mappingcom.adobe.idp.common.errors.exception.IDPException| [com.adobe.idp.um.businesslogic.authentication.AuthenticationManagerBean] errorCode:12805 errorCodeHEX:0x3205 message:Authentication failed for (Scheme - Certficate) Reason: Certificate Authentication failed since no user exists in the system that satisfies the certificate mapping
at com.adobe.idp.um.api.impl.ManagerImpl.handleException(ManagerImpl.java:251)
at com.adobe.idp.um.api.impl.ManagerImpl.handleException(ManagerImpl.java:194)
at com.adobe.idp.um.api.impl.AuthenticationManagerImpl.authenticate(AuthenticationManagerImp l.java:338)
at com.adobe.idp.um.api.impl.AuthenticationManagerImpl.authenticate(AuthenticationManagerImp l.java:154)
at com.adobe.idp.um.api.impl.AuthenticationManagerImpl.authenticate(AuthenticationManagerImp l.java:162)
at com.adobe.idp.um.dsc.util.dscservice.UserManagerUtilServiceImpl.authenticateWithWSHeaderE lement(UserManagerUtilServiceImpl.java:173)
at sun.reflect.GeneratedMethodAccessor1065.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at com.adobe.idp.dsc.component.impl.DefaultPOJOInvokerImpl.invoke(DefaultPOJOInvokerImpl.jav a:118)
at com.adobe.idp.dsc.interceptor.impl.InvocationInterceptor.intercept(InvocationInterceptor. java:140)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.interceptor.impl.DocumentPassivationInterceptor.intercept(DocumentPassi vationInterceptor.java:53)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor$1.doInTransaction(Transa ctionInterceptor.java:74)
at com.adobe.idp.dsc.transaction.impl.ejb.adapter.EjbTransactionBMTAdapterBean.doRequiresNew (EjbTransactionBMTAdapterBean.java:218)
at sun.reflect.GeneratedMethodAccessor363.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.jboss.invocation.Invocation.performCall(Invocation.java:359)
at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:237)
at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:158)
at org.jboss.ejb.plugins.CallValidationInterceptor.invoke(CallValidationInterceptor.java:63)
at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:121)
at org.jboss.ejb.plugins.AbstractTxInterceptorBMT.invokeNext(AbstractTxInterceptorBMT.java:1 73)
at org.jboss.ejb.plugins.TxInterceptorBMT.invoke(TxInterceptorBMT.java:77)
at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:169)
at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:168)
at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:205)
at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:138)
at org.jboss.ejb.SessionContainer.internalInvoke(SessionContainer.java:648)
at org.jboss.ejb.Container.invoke(Container.java:960)
at org.jboss.ejb.plugins.local.BaseLocalProxyFactory.invoke(BaseLocalProxyFactory.java:430)
at org.jboss.ejb.plugins.local.StatelessSessionProxy.invoke(StatelessSessionProxy.java:103)
at $Proxy179.doRequiresNew(Unknown Source)
at com.adobe.idp.dsc.transaction.impl.ejb.EjbTransactionProvider.execute(EjbTransactionProvi der.java:145)
at com.adobe.idp.dsc.transaction.interceptor.TransactionInterceptor.intercept(TransactionInt erceptor.java:72)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.interceptor.impl.InvocationStrategyInterceptor.intercept(InvocationStra tegyInterceptor.java:55)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.interceptor.impl.InvalidStateInterceptor.intercept(InvalidStateIntercep tor.java:37)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.interceptor.impl.AuthorizationInterceptor.intercept(AuthorizationInterc eptor.java:165)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.interceptor.impl.JMXInterceptor.intercept(JMXInterceptor.java:48)
at com.adobe.idp.dsc.interceptor.impl.RequestInterceptorChainImpl.proceed(RequestInterceptor ChainImpl.java:60)
at com.adobe.idp.dsc.engine.impl.ServiceEngineImpl.invoke(ServiceEngineImpl.java:121)
at com.adobe.idp.dsc.routing.Router.routeRequest(Router.java:129)
at com.adobe.idp.dsc.provider.impl.base.AbstractMessageReceiver.routeMessage(AbstractMessage Receiver.java:93)
at com.adobe.idp.dsc.provider.impl.vm.VMMessageDispatcher.doSend(VMMessageDispatcher.java:22 5)
at com.adobe.idp.dsc.provider.impl.base.AbstractMessageDispatcher.send(AbstractMessageDispat cher.java:66)
at com.adobe.idp.dsc.clientsdk.ServiceClient.invoke(ServiceClient.java:208)
at com.adobe.idp.um.dsc.util.client.UserManagerUtilServiceClient.authenticate(UserManagerUti lServiceClient.java:210)
at com.adobe.edc.server.platform.UMHelper.authenticate(UMHelper.java:549)
at com.adobe.rightsmanagement.webservices.rest.RestFacade.validateClientAuthenticationHeader (RestFacade.java:161)
at com.adobe.rightsmanagement.webservices.rest.RestFacade.getBusinessHandler(RestFacade.java :206)
at com.adobe.rightsmanagement.webservices.rest.RestFacade.getAuthenticationToken(RestFacade. java:226)
at com.adobe.rightsmanagement.webservices.rest.RestDefaultRequestHandler.handleRequest(RestD efaultRequestHandler.java:29)
at com.adobe.rightsmanagement.webservices.rest.RestSecureRequestHandler.handleRequest(RestSe cureRequestHandler.java:13)
at com.adobe.rightsmanagement.webservices.rest.RestRequestRouter.routeRequest(RestRequestRou ter.java:10)
at com.adobe.rightsmanagement.webservices.rest.RestServlet.doAction(RestServlet.java:50)
at com.adobe.rightsmanagement.webservices.rest.RestServlet.doGet(RestServlet.java:37)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:690)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.j ava:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.ja va:179)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java: 157)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:241)
a
2010-05-11 11:36:38,886 ERROR [STDERR] t org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.ja va:580)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)
at java.lang.Thread.run(Unknown Source)

Craig,
The certificate mapping works in the following manner,
First the User's certificate is validated.
If the certificate is valid, the related Certificate mapping information is fetched.
From the Certificate Mapping information, the domain is determined.
Following this, the user is searched in the domain and checked for it's current/deleted status.
If user exists or is a valid one, then return an AuthResult corresponding to that is returned to the client.
The error log below says, "Certificate Authentication failed since no user exists in the system that satisfies the certificate mapping"
1. Please check if the concerned user exists in the domain registered in the second cert mapping.
2. Also check if the concerned user satisfies the attribute mapping specified in the second cert mapping.
3. Could you confirm whether the admin Users and the normal users are distinct in both the domains and not duplicate in any of them??
Because if same user exists in 2 domains, then there is no way to find out which domain you are referring to. In that case the first domain which declares the user as valid will return the AuthResult.
4. You are using LC ES2, so there is a Test Certificate utlity on the same Certificate Mapping page, which can help you confirm the validity of the user's certificate and then you can proceed.

Apps installed on the iPhone cold not be determined

I searched my question, but never found an answer. How can I fix this? Apps installed on the iPhone could not be determined.

Need more info. What app is it? When does the error message pop up? What version of iOS are you running?

UAE Localization is installed in the system or not

Hi,
Version is : 11.5.9
db : 9i
how to check UAT Localization (HRMS) is installed in thes system or not??

Hi,
you want to know UAE localization(HRMS) patch have been installed or not ?if yes then then execute below query.
SELECT DECODE(legislation_code
,null,'Global'
,legislation_code) "LEGISLATION CODE"
, DECODE(application_short_name
, 'PER', 'Human Resources'
, 'PAY', 'Payroll'
, application_short_name) "APPLICATION NAME"
, to_char(LAST_UPDATE_DATE, 'MM-DD-YYYY HH24:MI:SS') "DATE APPLIED"
FROM hr_legislation_installations
WHERE status = 'I'
ORDER BY legislation_code
regards

Hyper-v replication Error Hyper-V received a digital certificate that is not valid from the Replica server 'burstingreplica'. Error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp"

Hi,
When trying to initiate hyper-v replication from the main server i'm getting this error in the event logs.
Hyper-V failed to enable replication for virtual machine 'RECADemo': A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. (0x800B0101). (Virtual Machine ID 561591B6-567C-...)--I'm using certificate based auth and cert is installed/recognized on both machines.Please help.Thanks,Jaffer
Jaf

Hi,
This error occurs because the Microsoft Certificate Trust List Publisher certificate expired. A copy of the CTL with an expired signing certificate exists in the CryptnetUrlCache
folder. Please try to renew the Trust List Publisher certificate.
The related KB:
Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server
http://support.microsoft.com/kb/2328240
How to Renew the Site Server Signing Certificate (Microsoft Certificate Services)
http://blogs.technet.com/b/configmgrteam/archive/2009/02/11/how-to-renew-the-site-server-signing-certificate-microsoft-certificate-services.aspx
Manage Trusted Publishers
http://technet.microsoft.com/en-us/library/cc733026.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I have a new MAC MINI and I want to install a second monitor. I have one connected to the HDMI and it works. I can't get a signal to the other one. It is connected from the thunderbolt to its HDMI port. How can I make it work?

I have a new MAC MINI and I want to install a second monitor. I have one connected to the HDMI and it works. I can't get a signal to the other one. It is connected from the thunderbolt to its HDMI port. How can I make it work?

Could be a bad cable or bad Thunderbolt port.
You have 90 days of free telephone support on a new device. You can call them at 1-800-MY-APPLE. Have your Mini's serial number handy
You can also make an appointment at the Genius Bar of an Apple store.
Apple Retail Store - Genius Bar

How to monitor MySQL Server installed in Windows Server using Nagios

You can do this via NSClient as Gary posted. The NSClient is a communications system that allows nagios to send commands to a target system over the nsclient protocol and they are executed on the remote system. You will still have to build some kind of vbscript or plugin to run on the target system to do the actual query to check on mysql.There are other options to. If you enable snmp on your target computer you can use a few nagios plugins to query the snmp agent on the target computer to see if a service is running. To do this via snmp you will need this plugin "check_snmp_process.pl" fromthis site.Your check command will look something like this:check_win_process:= check_snmp_process.pl -H $HOSTADDRESS$ -C "$USER6$" -n "$ARG1$" -w $ARG2$ -c $ARG3$The service definition will be like this:check_win_process!sqlservr!0!0This will check...

I installed Nagios Core in my Ubuntu workstation 10.04 for me to learn something new in my craft. I use this now to monitor our Windows Server 2008 with MySQL server installed as well as our Datalink Switch (DGS-1210-24). I searched on google on how to monitor a MYSQL server installed in Windows server using Nagios Core but i could not seem to find any. Could anybody who's expert in Nagios give me steps on how to do so. Thanks. All i found in google were steps in monitoring mysql installed in linux and nothing in windows server.
This topic first appeared in the Spiceworks Community

HT1978 how many network certificate I can install for 1 iphon or ipad? how can I check it is installed successfuly

hi ..
I have a email certificate in my profile for recieving my compmay email, when I login to company office Wifi, it ask me to accept a network certificate , I did accept it , but I can't find it in profile. My questiosn are:
1) How can I check whether I install certificate successfully ?
2) How many certificate I can install on 1 iphone or iPad ?
Thanks
Peter

1. Obviously by successfully connecting to WiFi, it insstalled successfuly.
2. As many as you want/need.

CSS: How to chain SSL certificates outside of CSS before install?

Could some one advise on how to chain the certs files outside and before installing to CSS, please.
How to check if the cert files I received are in PEM format?
What program (widows) I use to chain the certificates.
What is the order in which the chaining is done.
Currently all I have is two cert files
xxtrustL1c.crt.txt
xxxx.xxxxxx.net.pfx.txt
and
http://www.cisco.com/en/US/products/hw/contnetw/ps792/products_tech_note09186a00801de89b.shtml
Step by step guidence please.
Sri

In order to use the chained certificates on the CSS, the server certificate and intermediate must be concatenated together. This allows the CSS to return the entire certificate chain to the client upon the initial SSL handshake. When the chained certificate file is created for the CSS, make sure the certificates are in the proper order. The server certificate must be first, then the intermediate certificate is used to sign the server certificate must be next. The power entry modules (PEM) format is not very strict, and the empty lines between keys or certificates do not matter.
The entire contents of the mychainedrsacert.pem file are shown here with the server cert on the top, followed by the intermediate CA cert. If you need to add the root cert, it would go to the bottom.
-----BEGIN CERTIFICATE -----
BxMKQm94Ym9yb3VnaDEcMBoGA1UEChMTQ2lzY28gU3lzdGVtcywgSW5jLjESMBAG
Binary data of your server certificate
BxMKQm94Ym9yb3VnaDEcMBoGA1UEChMTQ2lzY28gU3lzdGVtcywgSW5jLjESMBAG
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Then you can re-import your new concatenated certificate file.
Hope this helps,
Sean

How to monitor self signed certificates using scom 2007 R2

How to monitor self signed certificates using scom 2007 R2. i need to monitor specifically self signed certificates expiration. if possible in two state monitor...please suggest me the best way..
B John

Hi,
Based on my understanding, that you want to create a monitor to monitor certificate expiration, with two state, when the certificate is about expiration for 21 days,, send warning, when the certificate is about expiration for 10 days, then send
alert. I think we need to create scripts to do so, hope the below links can be helpful:
Monitoring Certificates In SCOM
http://blogs.technet.com/b/omx/archive/2013/01/30/monitoring-certificates-in-scom.aspx
Monitoring Expiring Certificates using SCOM
http://blogs.technet.com/b/sgopi/archive/2012/05/18/monitoring-expiring-certificates-using-scom.aspx
Regards,
Yan Li
Regards, Yan Li

How to get a CA certificate installed in the web trust db from java servlet

Hi all.
Hi, I have a web-app that requires a client certificate from a CA. The CA cert is in the trust db of the webserver. And I would like to get the CA certificate (X509Certificate) corresponding to the issuer of the current client certificate of the request. Is there an easy way of doing this from a java servlet?
I'm using Sun Java System Web Server 6.1
Thanks in advance.

Hi, thanks for your quick answer.
I have to check the client certificate revocation status using ocsp protocol. I'm cheking ogro project ocsp library (http://dev.globus.org/wiki/Incubator/OGRO) to check this status against my CA validator agency. In order to use this library in my servlet to check the status I need both the client cert and the issuer cert. So that is why I need to get the CA cert from my trust db.
There is another way, I have the cert as file (the same I used to import the CA cert in my trust db), and I get the cert from the file. With this cert and the cert from the client I do the ocsp request and it works. But I trying to avoid having the CA cert in a file and recover the cert from the trust db.
Thanks

How to monitor a certificate period validity installed on the ACS ?

Similar Messages

Maybe you are looking for