Hi,

Yes, you need UCP implementation since you want that your ACS internal user should change their password on their own.

UCP# You use the UCP application to allow users to change their ACS passwords with a web-based utility. When users need to change passwords, they can access the UCP web page by using a supported web browser. For information about web browsers that we tested with ACS, see the release notes for your ACS product.

HERE ARE THE STEPS

==================

For configuring UCP

--> create two folders in C:\Inetpub\wwwroot\

1)secure

2)securecgi-bin

--> Create two virtual directories

1)secure (Read only access)

2)securecgi-bin (Read only & execute access)

--> install the UCP utility, while installing utility it will prompt for that path where the directories are located

1) http://x.x.x.x/secure

2) http:/x.x.x.x/securecgi-bin

also the ip address of the ACS server.

test the UCP

http://localhost/securecgi-bin/login.htm

MORE INFO:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/user_passwords/ucp.html#wp1041168

INSTALLATION GUIDE:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/user_passwords/ucpNW42.html

HTH

JK

Plz rate helpful posts-