Stopping ACS certificate being offered to clients

Hi,
Hopefully someone will be able to assist with this.
We have an issue where our wireless network is sending out the TLS certificate to new clients. We use this as a method of controlling which devices can access our network through wireless, so we don't really want to be sending it out to any old client that gets authenticated.
We want to manually place the certificate on the machines so that users can't add their phones or own devices to the network.
I believe this is either an issue with the ACS server or the WiSMs.
Any help is would be much appreciated.
Thanks
Luke

Hi Luke,
You can configure two types of certificates in ACS:
•Trust certificate—Also known as CA certificate. Used to form CTL trust hierarchy for verification of remote certificates.
•Local certificate—Also known as local server certificate. The client uses the local certificate with various protocols to authenticate the ACS server. This certificate is maintained in association with its private key, which is used to prove possession of the certificate.
For more information please go through this link:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-5/user/guide/acsuserguide/admin_config.html#wpxref44329

Similar Messages

  • Being offered 6.0-beta as a "security and stability" update from 5.0-stable

    My Mac is, or should be, on the -stable channel for Firefox updates, yet I am being offered an upgrade from 5.0-stable to 6.0-beta rather than to 5.0.1. about:config has "beta" in app.update.channel, and labels this "default" rather than "user set" -- so this is a client-side glitch rather than a server-side one, but I'd still like to know how this happened and why.
    Addendum: I tried changing that pref to "release" and to "stable", but the about box still offered the 6.0-beta upgrade rather than the 5.0.1 upgrade. Is this because the beta has already been downloaded? How can I get it to give me the 5.0.1 upgrade instead?

    Did you ever install a beta release in the past?
    Download a new copy of the Firefox program and save the DMG file to the desktop
    * Firefox 5.0.x: http://www.mozilla.com/en-US/firefox/all.html
    * Trash the current Firefox application to do a clean (re-)install
    * Install the new version that you have downloaded
    Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

  • Can I stop email from being sent?

    I have a number of email accounts configured in outlook 2010.
    I want to prevent email from being sent via one of the accounts.
    CAN I do this?
    If so How?
    I have tried to change the SMTP address to be invalid.
    It does not send, and does not give me an error.
    When I close outlook it tells me emails have not been sent. I have no idea where these emails r.
    When I restart it, it resets the smtp address and sends the email.
    ruggb

    thx for the reply
    The problem I am trying to work around is ppl using outlook try to send/reply/fwd emails using those old addresses. Outlook must be configured to rcv mail from clients using those addresses. So if the old email address is set as FROM I want to stop it from
    being sent.
    if i set the smtp address to an invalid the test never completes and I can never get to the end of that wizard.
    If I go back and look at it it is still the invalid address after I cancel the wizard.
    If i try to send mail it appears to do it after a long pause and i can't find the email anyplace -but it is not sent.
    If i shut down and restart outlook it is back to the valid address and the mail gets sent.
    I have it set only rcv, not send, that address in the group but that doesn't work.
    ruggb

  • How can I STOP Firefox from being a glutton with my virtual memory?

    How can I STOP Firefox from being a glutton with my virtual memory?

    Yes. But, I see from the THOUSANDS of responses here concerning Firefox memory issues that other people have had no more success than I have at trying to STOP Firefox's memory gluttony. The fact that Firefox runs fine (like the good old days) for a while after re-booting and registry cleaning shows that something is going on beyond the trivial/ineffective suggestions offered in the referenced links.
    Having to re-boot several times a day to get Firefox out of the molasses is such a pain, that it's no wonder people are going back to IE, or like me, reluctantly relying more and more on Google Chrome.

  • Any way to bypass server certificate validation in AIR client?

    Is there any way to bypass certificate validation and server identification for secure Channels or ChannelSets? I am aware of the existing workaround to import my own certificate into the user's CA chain, but I feel that having greater control on the client-side is preferred.
    If there is not a way to bypass client-side certificate validation I will be filing this as a feature request at http://bugs.adobe.com
    Thanks,
    Karl
    When producing a client-server solution it is occasionally useful to override the default behavior of HTTPS certificate validation and server identification. I would like to request the ability to override these systems in the AIR environment for applications installed with the "UNRESTRICTED" system access option.
    Simply allowing the use of self-signed certificates without verification (perhaps signified by a secure protocol identifier other than "https") would provide adequate functionality, but some users may desire finer control.
    This issue is partly addressed by bugs FP-711 and FP-214 but I feel it is important that any enhancement include the BlazeDS Channel in the case that the AIR application has unrestricted system access.
    When deploying an AIR client application which is securely connected to a network appliance which is controlled by the same developer it is desirable to bypass the overhead of acquiring a PKI issued certificate for every customer. Independent, open-source, and not-for-profit developers could see increased ability to adopt the AIR platform with this improvement.
    When deploying a network appliance to be used with an AIR application the requirement for a PKI issued certificate complicates the deployment of the network appliance by requiring DNS access, and thereby requiring Internet connectivity. Some customer sites require network isolation.
    It is possible to generate a developer-specific certificate and import that certificate into the AIR client host's Trusted Root Certification Authorities list. This workaround deteriorates PKI best practices and complicates the installation of AIR software. It is not possible to depend solely on the ".air" packaging for installation with the added requirement to install a new CA on the user's host.
    Java provides the requested functionality by allowing developers to provide their own implementations of javax.net.ssl.TrustManager for verification and javax.net.ssl.HostnameVerifier for identification. We have used this technique to communicate over the SDEE protocol with Cisco IDS devices which do not usually have PKI issued certificates.

    Hi Robert,
    No specific option to controle TOP/First features use.
    However other options exist to control IQ resources.
    Eg. Query_temp_sopace_limit, Query_Time, Max_IQ_Threads_Per_Connection, Max_Cartesian_Result.
    Regards,
    Tayeb.

  • Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?

    Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?
    Scenario: We have a few legacy certificates based on some legacy templates (2012 R2). Some belong to an old SubCA (2008 R2).
    I’ve can manually export them using certmgr mmc on the local machine to a single .p7b e.g.
    cert_backupNEW.p7b. But this is not a practical solution for me and I want to achieve this remotely via certutil or some other util that comes with Windows 7 machines.
    I’ve already worked out how to run a certutil command to add the certs back into the store e.g.
    certutil.exe -addstore -f my cert_backupNEW.p7b
    Is there a way to export multiple certs to a single backup cert, or is what I’m trying to do not possible with multiple certs?
    TC

    Something like this:
    $store = New-Object Security.Cryptography.X509Certificates.X509Store "my","localmachine"
    $store.Open("ReadOnly")
    Set-Content -Path exportedcerts.pfx -Value $store.Certificates.Export("pfx","password")
    $store.Close()
    note that this command will fail, if there are certificates with non-exportable keys. You cannot export certificates with non-exportable keys.
    My weblog: en-us.sysadmins.lv
    PowerShell PKI Module: pspki.codeplex.com
    PowerShell Cmdlet Help Editor pscmdlethelpeditor.codeplex.com
    Check out new: SSL Certificate Verifier
    Check out new:
    PowerShell FCIV tool.

  • I was able to download and install Photoshop CC 2014 on my Mac Laptop.  I am not being offered the new version on my iMac desktop. Why?  I am a member of Adobe Creative Cloud.

    I was able to download and install Photoshop CC 2014 on my Mac Laptop.  I am not being offered the new version on my iMac desktop. Why?  I am a member of Adobe Creative Cloud.

    Please refer:
    http://helpx.adobe.com/photoshop/system-requirements.html
    Regards,
    Ashutosh

  • Provide steps to send Root CA certificate to the Lync client, getting error" There was a problem verifying certificate from the server"

    Hi,
      I Build an Lync 2013 set up with FEpool, Director pool and Exchange server is integrated. I have windows 8 client machine, with Lync client installed. When I try to login to the lync client, I am getting error like"There was a problem verifying
    certificate from the server".
    When I installed ROOT CA cert  manually on client machine I am able to login to the lync client. similarly if I add my client machine in my domain, I am able to login to the Lync client.
    Now is there any other way to send the certificate automatically to the client machine (Which are NOT part of the DOMAIN) from the server, instead of manual installation process.
    Please help me troubleshoot this problem

    Agree with S Guna, there is no easy way to push a certificate automatically to a client that you don't control other than building an installer package and asking them to run it.  In this situation, if there are a lot of non-domain joined machines
    a third party certificate is the way you need to go.
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
    SWC Unified Communications

  • How to stop files from being locked in Mountain Lion?

    In the last week, I have found several of the files that I have generated or downloaded have become locked.  Since Apple has eliminated the Auto locking feature that use to be in Time Machine.  The files include PDFs, PHGs, TXTs, etc.  How do I stop files from being locked?  How do I unlock the ones that are locked?  I can not emtpy my Trash. 

    When I went to "Get Info" on one of the locked files [a TXT file] per your steps, I noticed that the there was a Locked box checked.  I unchecked that box and was then able to remove the files from Trash without any further action. 
    Do you know why it got locked in the first place since Mountain Lion does not automatically lock files as the older OS X version did?  Do you know how to prevent it from happening again?
    I want to thank you for your suggestion.
    Mac

  • HT1222 This article contains absolutely NO information about the update being offered.

    This article contains absolutely NO information about the update being offered. It doesn't even tell me what it might break on my system (i.e. what gets changed). Just excuses of "We Aren't Telling Until Our Investigation Is All Done."
    That's not a good enough reason to install an update, it never was, and it never will be.
    "Do it because we say so" might fly overseas in Foxconn factories, but around here we don't like being kept in the dark and fed a load of fertilizer.

    The individual update pages, such as this one, list the changes and fixes. The reference to information which Apple doesn't release is about security bugs it's identified but not patched, as it would only be useful to attackers.
    (64503)

  • How can I stop recent history being displayed in history menu without stopping remembering history altogether

    I'm using the latest release (10.0) and am looking for a way to stop the history from being displayed in the History menu without turning off History, so I can still access History by going into the library.

    I suppose it would help if I knew not only what you wanted but why, as there are a few possibilities that may help.
    You may use private browsing,to stop some events being logged into the history in the first place, you may also clear items,single ones if need be.
    * see[[Clearing Location bar history]]
    * and [[private browsing]]
    You can choose whether or not to display the history as suggested options from the location bar.
    * see [[location bar autocomplete#w_how-can-i-control-what-results-the-location-bar-shows-me]]_how-can-i-control-what-results-the-location-bar-shows-me
    If you save History, then it can be displayed, I dare say there are methods of removing the button/option to display history from the UseIneterface but it would still be available from the Library.
    Another option you may consider is settng up user accounts on the Operating System for different users, or even setting up separate firefox profiles for different users on the same OS account.

  • In random mode some songs stop playing before being finished

    in random mode some songs stop playing before being finished

    I've heard this excuse before, that what we think is random really isn't, but when certain trends occur enough times, its pretty clear that there is some kind of algorithm or something in the coding that affects the shuffle.
    I know random means random, but there are too many "random" coincidences and apparent patterns that occur to raise doubt that it truly is as random as Apple claims.
    One such example, is that when using the Shuffle Songs feature (that shuffles all tracks on the iPod) I had 2-3 tracks from the same album (an album I had never even listened to yet) showing up within the first 40 tracks five times in a row. Numerous other songs showed up in at least 3 of the 5 "trials." Out of 8,000 songs.
    On a playlist (of 300 or less songs is all I have tried), if you have multiple songs off the same album, you are far more likely to hear at least one other song off a given album within about 10 songs then you are to not hear a song off the same album. A specific example of this is on a playlist of 105 songs I have, there are 3 songs off one album, however nearly every time 2 of the songs will play within a 10 track range, and nearly as often all 3 songs will play within the same 20 track range.
    I know random isn't perfectly spaced songs, but when certain things happen often enough, the odds of it become so low that even the "true random" explanation doesn't cover it.

  • Every time I open a document on my Apple Mac a copy is saved to My Documents which I don't want. How do I stop the documents being saved automatically all the time??

    Every time I open a document on my Apple Mac a copy is saved to My Documents which I don't want. How do I stop the documents being saved automatically all the time??

    OS X Lion- About Auto Save and Versions
    You cannot disable this.

  • My Lightroom kepps stopping just after being loaded. My Lightroom is 5.4 64 bits installed on a Dell PC with Windows 8.1(upgraded from 8). I have uninstalled Lightroom and re-installed it with the same result. What could be the problem?

    My Lightroom kepps stopping just after being loaded. My Lightroom is 5.4 64 bits installed on a Dell PC with Windows 8.1(upgraded from 8). I have uninstalled Lightroom and re-installed it with the same result. What could be the problem?

    Try resetting your preference file next: http://www.lightroomforums.net/showthread.php?14226-Resetting-(or-Trashing-)-the-Lightroom -Preferences-file
    It survives an uninstall/reinstall.

  • I have Photoshop cs5, version 12.0.5.  I keep being offered an "Update" to 12.0.4 and am puzzled.  How can I turn off this offer or should this update be applied?

    I have Photoshop cs5, version 12.0.5 x32 installed on a Widows box.  I keep being offered an "Update" to 12.0.4 and am puzzled.  How can I turn off this offer or should this update be applied?  If it should be applied how to do it.  When I try it, the update fails.
    Thanks!

    I found the answer in another forum thread...

Maybe you are looking for