Generating A Self-Signed Certificate - Cisco 3.3 User Manual

Chapter 10 System Configuration: Authentication and Certificates

Generating a Self-Signed Certificate

Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
78-16592-01
Digest to sign with—Select the hash digest to be used to encrypt the key from
•
the choices listed. The choices include SHA1, SHA, MD2, and MD5.
Install generated certificate—Select this check box if you want
•
Cisco Secure ACS to install the self-signed certificate that it generates when
you click Submit. If you employ this option, Cisco Secure ACS services must
be restarted after you submit the page for the new settings to be adopted. If
you do not select this option, the certificate file and private key file are
generated and saved, but are not installed into local machine storage.
All fields on the Generate Self-Signed Certificate page are mandatory. For
information on the fields' contents, see
Options, page 10-48.
To generate a self-signed certificate, follow these steps:
In the navigation bar, click System Configuration.
Click ACS Certificate Setup.
Click Generate Self-Signed Certificate.
Cisco Secure ACS displays the Generate Self-Signed Certificate edit page.
In the Certificate subject box, type the certificate subject in the form cn=XXXX.
You can enter additional information here, for information see
Certificate Configuration Options, page
In the Certificate file box, type the full path and file name for the certificate file.
In the Private key file box, type the full path and file name for the private key file.
In the Private key password box, type the private key password.
In the Retype private key password box, retype the private key password.
In the Key length box, select the key length.
In the Digest to sign with box, select the hash digest to be used to encrypt the key.
Self-Signed Certificate Configuration
10-48.
User Guide for Cisco Secure ACS for Windows Server
Cisco Secure ACS Certificate Setup
Self-Signed
10-49