I'm using ACS 4.2 appliance. Can users log-in to the appliance via web to change their passwords? Or UCP is needed?
Yes, you need UCP implementation since you want that your ACS internal user should change their password on their own.
UCP# You use the UCP application to allow users to change their ACS passwords with a web-based utility. When users need to change passwords, they can access the UCP web page by using a supported web browser. For information about web browsers that we tested with ACS, see the release notes for your ACS product.
HERE ARE THE STEPS
For configuring UCP
--> create two folders in C:\Inetpub\wwwroot\
--> Create two virtual directories
1)secure (Read only access)
2)securecgi-bin (Read only & execute access)
--> install the UCP utility, while installing utility it will prompt for that path where the directories are located
also the ip address of the ACS server.
test the UCP
Plz rate helpful posts-