Generating A Certificate Signing Request - Cisco 3.3 User Manual

Chapter 10 System Configuration: Authentication and Certificates
Step 5

Generating a Certificate Signing Request

Note
Step 1
Step 2
Step 3
78-16592-01
Click Delete.
The specified CRL issuer, and all CRLs from that issuer, is deleted from
Cisco Secure ACS.
You can use Cisco Secure ACS to generate a certificate signing request (CSR).
After you generate a CSR, you can submit it to a CA to obtain your certificate.
You perform this procedure to generate the CSR for future use with a certificate
enrollment tool.
If you already have a server certificate, you do not need to use this portion of the
ACS Certificate Setup page.
To generate a certificate signing request, follow these steps:
In the navigation bar, click System Configuration.
Click ACS Certificate Setup and then click Generate Certificate Signing
Request.
Cisco Secure ACS displays the Generate Certificate Signing Request page.
In the Certificate subject box, type values for the certificate fields required by the
CA you want to submit the CSR to. A CN field is mandatory. The format is:
field value field value
= , =
where field is the field name, such as CN, and value is the applicable value for the
field, such as acs01primary. You can type a maximum of 256 characters in the
"Certificate subject" box. Separate multiple values with commas. For example:
CN=acs01primary, O=WestCoast, C=US, S=California
The following table defines the valid fields that you can include in the "Certificate
subject" box.
, . . .
User Guide for Cisco Secure ACS for Windows Server
Cisco Secure ACS Certificate Setup
10-45