Question of cert ACS 4.1 (2048 bits)?

I am trying to install a cert .p7b on our ACS, I get "certificate file is invalid or not supported."

I know 2048-bit CERTS were not supported in 3.3, is this always the case?

Yes, it's always the case. Watch this doc and do a search for key size-1024 *.

The doc says:

Note: Windows 2003 Enterprise certification allows above 1024 key sizes. But the use of a key greater than 1024 does not work with the PEAP Protocol. Authentication may seem pass GBA, but the client blocks just as he attempts authentication.

http://www.Cisco.com/en/us/products/sw/secursw/ps2086/products_configuration_example09186a0080545a29.shtml

Tags: Cisco Wireless

Similar Questions

  • Iranian hackers broke the 2048-bit RSA?

    Iranian hackers broke the 2048-bit RSA?

    Hello

    Best of these issues to the direct (CEG) RSA.

    RSA, the security of EMC Division
    http://en.Wikipedia.org/wiki/RSA_Security

    I hope this helps.

  • Impossible to import a private key RSA 2048 bits for Cisco SG500 SSL certificate,

    On a Cisco SG500 - 52 Small Business switch, I generated a new 2048-bit RSA private key and generated a Certificate Signing Request to submit to a certification authority. I received the new certificate of the certification authority and tried to import it to the switch SG500-52. (1.2.7.76, boot 1.2.0.12 firmware version)

    It is not possible to paste the text obtained certificate in the import box. the area of importation is limited to less than characters than the length of a certificate for a 2048-bit key...

    Catch-22, anyone? (Or maybe better to say, wrestling-2048?)

    Is there a solution to do this, perhaps in a more recent version of the firmware? It is possible to the CLI instead of the web interface?

    Thank you

    Hi Jay Libove,.

    You can also try with cli. Telnet or ssh to the switch, then

    terminal #configure

    Crypto (config) # certificate import<1-2>

    It gives you a prompt

    Please copy - paste the entry... etc.

    copy and paste the certificate and at the end add a point (.) at the end.

    See if this work. You must have the certificate and the private key, but the copy of the certificate request does not work.

    Let me know if I can help you further.

    Thank you

    Prithvi

  • Question of VPN &amp; ACS

    Hello

    It's maybe a stupid question, but I need to learn more about security issues, so here's my question: If the remote end users can access their corporate network via secure VPN, then why do need ACS solution? Thank you to educate me.

    My examples are not too clear. You are right in that you can provide access to the server to your VPN users through AAA filters for the VPN concentrator.

    In the environment where I work, we also use ACS to authenticate wireless users AS5300 dial-up users and access to our routers and switches.

    Here is a link that I hope this explains a bit more clear:

    http://www.Cisco.com/en/us/products/sw/secursw/ps2086/products_user_guide_chapter09186a0080205a5d.html

    HTH

    Steve

  • Question about Satellite L40 and Vista 32 bit

    Hey all, I have the following problem.
    I have Satellite L40 series 2 PC and tried to install vista ultimate 32 bit, and they freeze only on the process of "complete installation."
    I read in some other forums and found it is not only my problem. I tried with 64 bit ultimate, it's all OK. It may be, the main problem is that it is not possible to install VISTA 32 bit.
    I only ultimate now, so my question is if anyone knows or installed to another type of Vista 32 bit on these series?

    Thanks before

    As far as I know that all new models of Toshiba laptops come with Vista 32 bit. Satellite L40 is offered in three different models, and each one also comes with 32-bit operating system. If you have the recovery DVDs with your laptop is Vista 32 - bit OS. I assume it must be the Home Premium version.

    I don't have a model L, but my model works well on Vista Ultimate.

  • Two questions about the ACS 5.1: password aging and allowing multiple disabled accounts

    Hello

    I test in ACS 5.1 password aging, and I discovered that you can have only one global setting for the password for all the accounts internal life. Is it possible to exclude some internal accounts of this global password aging policy? I would like to have number of accounts, passwords should not be aged at all...

    Second question: when I was testing password aging, I set myself to life of password in 4 days with warning after 2 days. All accounts in my test of the ACS configuration are now disabled, because 4 days has passed when I changed it. Is there a possibility to allow multiple accouns at once, or do I have to activate 500 internal accounts manually, one by one?

    Thanks in advance

    WM

    I'm not aware of any way to score internal as users with passwords as enver expire. This is done for admins ensure there is always an admin who can access the system

    In order to change the multiple/all documents for internal users, the following approach can be taken:

    1. Go to the list of internal users and press "Export" then 'Start export' and 'Save file' export user records to a csv file
    2. Edit the file. In the title 'active' column replace 'FALSE' to 'TRUE' for all records. Save the updated file
    3. To the page that lists internal users, tap "File Options", select "Update", and then click next to access the section "Import a file" Wizard. Select the file saved in step 2) and tap on finish

    Afetr imort is completed, all records of internal user should now display "Enabled".

  • Re: Two questions on Satellite A300 and Win7 32 bit

    Hello

    I have a satellite A300 PSAJ4E windows 7 32 bit.
    I installed all the drivers to Toshiba support, but I have 2 problems.
    the first is that sometimes my screan does not open while the laptop is open and functioning. I know that his work because when I plug another screen his everything is ok.
    the other problem is that I have an unknown device (ACPI\TOS6205)

    Can someone help me?

    Thank you

    > the first is that sometimes my screan does not open while the laptop is open and functioning properly
    It is still problematic to discuss problems that sometimes occur. When this happens you can see Toshiba welcome screen or hear sounds of windows?
    > another DIF, is that I have an unknown device (ACPI\TOS6205)
    I think that you need to install the bluetooth drivers.
    Find it here: http://aps2.toshiba-tro.de/bluetooth/?page=download-toshiba

  • Satellite Pro L550 - 17U PSLW9E - question of the HARD Win 7 64 bit disk recovery

    Hello

    Basically, when I got the laptop it had Windows 7 Home Premium 64 - bit installed.
    I created the backup disks, as asked it the first got scratched and gets stuck on the installation, I can install the 32-bit version (the CD it came with) and I tried to create a new 32-bit system recovery disk but it creates just a 32 bit recovery disc (which I already had the appropriate drive).

    Just to see if there is a way to restore the 64-bit system without having to buy a new version of windows?

    Satellite Pro L550-17U
    Part number: PSLW9E-01500MEN
    Windows® 7 Home Premium 64-bit authentic (pre-installed, Toshiba-HDD recovery) and
    Genuine Windows® 7 Home Premium 32-bit (Toshiba-Recovery DVD)

    Hello

    You reinstalled the operating system using the Toshiba Recovery disk which contained the Win 7 32-bit operating system. The recovery of 32 bit Win7 has formatted the whole HARD disk and has deleted all partitions (recovery partition HARD drive containing too many Win 7 64 bit OS)! and replaced with Win 7 32 bit.
    This means that Win 7 64 bit is no longer available on the HARD disk.

    In my opinion, there is nothing to do you will need to order new Win 7 64 bit recovery disc.

    Welcome them

  • (Question) How to install win 7 64-bit on dell latitude d630 running under win xp sp3?

    Please, someone can guide me to install win 7 64 bit on my latitude d630? And what basic requirements so he could do it. Please help me... Searched a lot, but can't find any installation procedure Guide.

    See the Windows reinstallation Guide / A clean installation of Windows 7:

    http://dellwindowsreinstallationguide.com/

    See also unofficial pilot games:

    http://dellwindowsreinstallationguide.com/driver-sets/latitude-d-series-laptops/latitude-D830-Windows-7-64-bit/

  • Classic question: SSL VPN Client and Vista 64 - bit OS

    Material: 64-bit software architecture: Windows Vista Home Cisco Hardware (64-bit): 871w router Cisco Software: base of 12.4 T having a challenge with Windows Vista (64) using the SSL VPN. Use of IE, I can navigate to the url, both using the DNS name and IP address. I do not have a signed certificate, so I get the standard warning screen where you will need to click on the red x to continue. At this point, the progress bar moves for a fraction of a second and it's there. For troubleshooting I tried: - clearing cookies, cache, etc. - add url and IP to the Zone of confidence - reset areas rest default - disabled options window popup and phisher IE7 - off all 3rd party Manager BHO - withdrawal of MacAfee software suite - disable User Control that allowed me to make the sign in page, but after the signature - I had a blank white screen. Then, I downloaded Firefox 3.0 (newer) and tried to connect. After a series of guests to accept and download the certificate, I was able to connect and click on the Start button to start the session. The next little screen came as expected and he chose Java. I received a message that it could not install the Cisco AnyConnect Client's and I had to download it manually. Downloaded and installed the client software. Logging out of the browser and its closure - I could not access the page again. It appeared to hang again with a progress bar. I went to empty cache, cookies, passwords etc in Firefox and reloaded the application. Still, I was able to connect. However, I always received the message that the customer could not install and download manually. For fun, I exported the certificate on the desktop and imported into Internet Explorer. I tried the connection with IE, but he had a similar problem. I was told there was no client IPSEC for OS 64 bit (Vista at startup), but most of the new machines are 64 - bit OS systems. I would appreciate any support. Lucky me, the computer to which it is impossible to connect to the VPN is the home of the CEO of the company. The last person that wants to make him miserable.

    Cisco AnyConnect VPN Client is now available for the Windows operating systems, which includes Vista 32 and 64 bit. The Cisco AnyConnect VPN Client, Version 2.2 supports SSL and DTLS. It does not support IPSec at the moment.

    See the url below for more information on troubleshooting anyconnect vpn client:

    http://www.Cisco.com/en/us/products/ps6120/products_tech_note09186a00809b4754.shtml

    See the following url for the release notes for the version of the client anyconnect vpn 2.2 for use with windows vista:

    http://www.Cisco.com/en/us/docs/security/vpn_client/AnyConnect/anyconnect22/release/notes/anyconnect22rn.html#wp815989

  • Question about migration from 32 to 64-bit win7pro

    I recently bought a refurbished laptop comes preloaded with Windows 7 Professional 32 bit. Also, the laptop came with installation media on dvd for 32 and 64 bit. I want to migrate to 64-bit laptop, but I fear that the system has already been activated.

    You will need to do a clean install, there is no place on the way to upgrade Windows 7 32 bit to 64 bit.

    Using the disk of 64-bit Windows 7, install Windows 7 Windows Easy Transfer Utility from the DVD (to find it, simply navigate to x:\support\migwiz, "x:" is the name of your hard drive. (In this case, you will see a collection of files, the important"that you must search for and double-click is 'migsetup'.) run it and create a DAMP (Windows Easy Transfer file), if you have an external hard drive, you can access it later when you perform a clean install of Windows 7 64-bit disk so you can stored there.

    Once you have done this, just do a clean install of Windows 7 64 bit disc. In Windows 7 64 bit disk, start Windows Easy Transfer, follow the wizard screen, tap on which is stored the WET file (external hard drive) and it will restore your personal files and settings. Reinstall the applications needed.

    http://www.notebooks.com/2009/10/07/using-Windows-easy-transfer-in-Windows-7/

    Boot from the DVD 64 bit Windows 7
    Click Install now
    Accept the license agreement
    When the option is displayed to select a type of installation, click (Custom advanced)

    Select the disk partition where you want to install Windows 7 click Next.

    You will receive the following warning:

    The partition you have selected may contain files from a previous Installation of Windows. If so, these files and folders will be moved to a folder named Windows.old. You will be able to access the information in Windows.old, but you will be able to use your previous version of Windows.

    (At all costs, do NOT click on anything in Format, deletion or Partition name.) So even do a custom installation, your personal files are still kept. Click OK

    The installation program will now begin installation. During installation, your computer will be restarted several times.

    Once the installation is complete, you can complete the Out of Box experience as the choice of your laptop, create a username, password, your time zone. You can then proceed to download the latest updates for Windows and reinstall your applications and drivers.

    You can then retrieve your personal files from the Windows.old folder and reinstall all of your applications and drivers.

    http://notebooks.com/2010/11/09/how-to-recover-documents-music-and-email-after-upgrading-with-the-Windows-old-folder/

    How to activate Windows 7 manually (activate by phone)
     
    1) click Start and in the search for box type: slui.exe 4
     
    (2) press the ENTER"" key.
     
    (3) select your "country" in the list.
     
    (4) choose the option "activate phone".
     
    (5) stay on the phone (do not select/press all options) and wait for a person to help you with the activation.
     
    (6) explain your problem clearly to the support person.
     
    http://support.Microsoft.com/kb/950929/en-us

  • Your computer has been locked and all your files encrypted with RSA 2048-bit encryption.

    My computer has been hit by a ransomware (which is reported by Palo Alto Networks March 4, http://researchcenter.paloaltonetworks.com/2016/03/new-os-x-ransomware-keranger-infect es-transmission-bittorrent-client-...)

    What should I do to save my files?

    And how to remove the virus permanently?

    If you do not have a backup that has not been attached while the virus was busy to encrypt your data, I think it's too late now.

    To be absolutely sure that there is nothing left on the computer, the only way is from scratch.

  • Question about the possible television series total bit rate discrepancy

    Hello, I started recently to buy some from Itunes TV shows when I noticed something I was curious about. I noticed that when I look at the "total sampling rate" for none of them via "My TV Shows" in Itunes, they tend to be a little higher than the sampling rate total on the physical files that I have. For example when you look at the an M4V file that is lists the total flow as being '5257' but must I go to my tab TV shows from Itunes and watch the news for that same file, it shows the total flow is "5663." I'm just curious as to why they are apparently different when the size of the two files are apparently identical.

    Also as a note on the side of something else that I've been curious to know is why is the size of physical videos always slightly more small then what is stated on the page of the show? For example, the first episode is 968 MB but the file is only 923, however after that, in the peripheries, it shows (968,071,723 bytes) Does this mean that it is actually the same size, it's just that how M4V are compressed it occupies less space because of its format or something?

    Any help would be appreciated, I'm relatively new to actually buy things via Itunes so I want to just make sure I know all the details, for example I just found out the other day, after downloading an entire show, I had to set it manually to download 1080 p, otherwise you end up with 720 p instead, which means that I had to re - download it all again.

    * BRACKET

  • ACS 4.2 questions

    Dear Experts,

    I have a few questions about the ACS.

    (1) is it possible to display the MOTD banner for this version 4.2.1... ?

    (2) it works with GANYMEDE or GANYMEDE +? because they found in the audit, as it turns with GANYMEDE, how to change to GANYMEDE +... ?

    Thanks in advance.

    Cisco Secure ACS 4.2 use Ganymede +. GANYMEDE + is a cisco proprietary protocol. When you add any AAA on ACS customer", you must use authenticate with GANYMEDE + (Cisco IOS) under the network configuration.

    ~ BR
    Jatin kone

    * Does the rate of useful messages *.

  • (Win 7 Ultimate) 32-bit to 64-bit without

    Hey guys, I'm pretty new to computers, I just have a question. Can I switch from 32-bit Win 7 Ultimate to a 64-bit version, I do not have the CD right? Thank you very much.

    You can upgrade, but it will be a "Custom" / Clean install because there is no direct path from a 32-bit OS to a 64-bit version of Windows. "" See detailed information on getting a 64 Bit DVD and installation procedures below the dotted line.

    What this means is that you will need to re-install all of your applications and make a backup of your data (Photos, music, Documents, Etc.) files before start you.  I also suggest that you create an image backup of your existing installation of 32-bit as safety net.

    You will also need to download 64 bit versions of the brand device drivers your computer and model number. Install the drivers once the upgrade has been completed, starting with the chipset driver and then install the drivers, SATA, USB, Audio, LAN, or the Internet, wireless.

    = Image backup utilities =.

    EaseUS Todo Backup Home V6.5 http://www.TODO-backup.com/
    Free version: http://www.todo-backup.com/products/home/free-backup-software-features.htm
    Includes: Clone of disk/partition, incremental backup
    User Guide: http://www.todo-backup.com/download/docs/User_Guide.pdf
    (Note: Todo install then create a diskette "emergency" before you start creating your first image backup)
    Version 6.5 supports XP, Vista, Windows 7, 8 and 8.1

    Acronis True Image 2014 - has a 30 day trial version available, trial key sent by email.
    Note: Initialization of cloning and the road (creating a MBR) are not supported in the trial version.
    For the trial version, only pick up is available when booting from a Bootable Acronis media.
    Install Acronis and then create a bootable media restoration/rescue CD before you start creating your first backup image
    http://www.Acronis.com/homecomputing/products/
    30-day trial: http://www.acronis.com/homecomputing/products/#tryorbuy
    True Image User Guides and documentation:
    http://www.Acronis.com/support/documentation/
    2014 supports XP, Vista, Windows 7 and Windows 8

    = Download and create an installation DVD.

    Download Windows 7 proper. ISO file that includes Service Pack 1
    (Note: must match for your product key version)

    How do I know if I have a version of 32 or 64 Bit of Windows installed on my computer:
    http://Windows.Microsoft.com/en-us/Windows7/find-out-32-or-64-bit

    Windows 7 Home Premium 32 Bit: http://msft.digitalrivercontent.net/win/X17-58996.iso
    SHA1 hash: 6071B4553FCF0EA53D589A846B5AE76743DD68FC
    Windows 7 Home Premium 64-Bit: http://msft.digitalrivercontent.net/win/X17-58997.iso
    SHA1 hash: 6C9058389C1E2E5122B7C933275F963EDF1C07B9

    Windows 7 Professional 32 bit: http://msft.digitalrivercontent.net/win/X17-59183.iso
    SHA1 hash: D89937DF3A9BC2EC1A1486195FD308CD3DADE928
    Windows 7 Professional 64-bit: http://msft.digitalrivercontent.net/win/X17-59186.iso
    SHA1 hash: 0BCFC54019EA175B1EE51F6D2B207A3D14DD2B58

    Windows 7 Ultimate 32 Bit: http://msft.digitalrivercontent.net/win/X17-59463.iso
    SHA1 hash: 65FCE0F445D9BF7E78E43F17E441E08C63722657
    Windows 7 Ultimate 64-Bit: http://msft.digitalrivercontent.net/win/X17-59465.iso
    SHA1 hash: 36AE90DEFBAD9D9539E649B193AE573B77A71C83

    (1) after downloading the correct .iso file install HashCalc and validate the SHA1 hash value
    is correct. If the download is not corrupted, the value HashCalc returns will be the value of SHA1 I posted.
    HashCalc: http://www.slavasoft.com/hashcalc/index.htm

    (2) then use ImgBurn or ISO gear to burn a bootable DVD.

    Create a Windows 7 Bootable DVD using the. ISO file
    Engraving of a file of Windows 7 ISO on a DVD
    http://support.Microsoft.com/default.aspx/KB/977640

    ImgBurn - in addition to supporting the creation of CD/DVD of. ISO files,
    It supports a wide range of image file formats, and it's free.
    (BIN, CUE, DI, DVD, GI, IMG, MDS, NRG, PDI and ISO)
    http://www.ImgBurn.com/

    Projectiles help you to use ImgBurn to screen: http://www.imgburn.com/index.php?act=screenshots
    Burn the ISO Images with ImgBurn article: http://neosmart.net/wiki/display/G/Burning+ISO+Images+with+ImgBurn
    (Les étapes sont les mêmes pour Windows 7 ou Windows 8), except that you do not create a repair disk but complete an installation DVD)

    Note: Always use high quality DVD + R media and slower burning (4 x or 6 x) speed is offered a choice.

    ====================== Keyless Install ================================

    How to perform a 'Keyless Install"of Windows: (do not use your product key immediately)

    Boot from the Windows 7 DVD disc, you create and launch the installation.

    After you have entered the user name and password that you will be asked:
    "Type your Windows product key", do not enter a key.
    Also located just below the box where you enter the key is a box with a check mark
    to "Automatically activate Windows when I'm online", remove the check box and click "next".

    You now have a 30-day grace period to activate Windows.

    During the grace period, you can install your device drivers,
    run Windows updates and solve other problems or issues.
    Once you are satisfied everything is working properly, and then activate Windows.

    ====================== Device Drivers ===============================

    Go to your computer manufacturer's support web site and search for Windows 7 drivers for your specific model number.

    If there are Windows 7 drivers, then to download to a folder on your hard drive and install all of them, starting with the card drivers mother/chipset, SATA, LAN, Audio, USB, graphics, Webcam, Etc., and so on.

    List of computer manufacturer support sites:
    http://Windows.Microsoft.com/en-us/Windows/help/contact-support/computer-manufacturers

    Tips for solving common driver problems
    http://Windows.Microsoft.com/en-us/Windows7/tips-for-fixing-common-driver-problems
    Vista: http://windows.microsoft.com/en-US/windows-vista/Tips-for-fixing-common-driver-problems

    Graphics/video drivers:
    Check the download site of the manufacture of the graphics card for the latest Windows 7 drivers for your card.
    ATI: http://support.amd.com/us/gpudownload/Pages/index.aspx
    NVIDIA: http://www.nvidia.com/Download/index5.aspx?lang=en-us

    = Run Windows Update =.

    Install the 'Important' updates that are available.

    Make a small group (10 updates both maax) of updates at the same time
    reboot if prompted and install another small group of updates and so on.
    registration of .NET Framework updates for the end.

    = How to activate Windows 7 by Internet =.

    1) click Start and in the search for box type: activate
    2) click on the 'Activate Windows' option at the top of the list
    3) click on "now, activate Windows online.
    (4) enter your 25-character product key (not case sensitive)
    5) click "Next" and wait for the key must be verified.

    Another method - to reach a real person:
    1) click Start and in the search for box type: slui.exe 4
    (2) press the ENTER"" key.
    (3) select your "country" in the list.
    (4) choose the option "activate phone".
    (5) stay on the phone * do not select/press any option * and wait for a person to help you.
    (6) explain your problem clearly to the support person.
    (7) the person must give you a confirmation ID, copy it down on paper,
    (8) check that the ID is correct in reading the support person.
    (9) to enter the ID number, then click 'Next' to complete the activation process.

    Microsoft Activation centers worldwide telephone numbers:
    http://www.Microsoft.com/licensing/existing-customers/activation-centers.aspx
    (This site is for activating Volume License, but if you call, they will help you)

    The phone number is not working:
    Microsoft Worldwide contacts: http://www.microsoft.com/worldwide/default.aspx

    Activation and registration of a Microsoft product
    http://support.Microsoft.com/?kbid=326851
    Windows activation: (888) 571-2048

    J W Stuart: http://www.pagestart.com

Maybe you are looking for