Solved: NAC CAM/CAS Temporary Certificate expired

ericohermoso · ‎09-27-2010

Hello Guys,

I have a high availability pairs of NAC(CAM/CAS), Last 3 months I generate temporary certificate and now it is expired.

Do I need to generate again a new temporary certificate and delete the old one? Is there any certificate that can give me lifetime certificate?

Faisal Sehbai · ‎09-27-2010

Hi,

Please review this document detailing how to generate certificates for longer terms:

https://supportforums.cisco.com/docs/DOC-11889

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

View solution in original post

Faisal Sehbai · ‎09-29-2010

Hi,

Yes, you can issue certs for a century if you'd like. :-) For ten years, put in 3650 as the number instead of 1000

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

View solution in original post

Faisal Sehbai · ‎10-02-2010

Hi,

Yes, 4.8 has been out for a bit now. Download it here: http://bit.ly/dwaXlc

Release notes, including the new features, the bug fixes and the upgrade instructions for 4.8 are here: http://bit.ly/9inkeW

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

View solution in original post

Faisal Sehbai · ‎09-27-2010

Hi,

Please review this document detailing how to generate certificates for longer terms:

https://supportforums.cisco.com/docs/DOC-11889

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

ericohermoso · ‎09-28-2010

Hello Faisal,

thanks as always as you are precise, i see in the document that the certification can be used for 1000 days? is it possible that I can changed it for example 10 years?

thank you and best regards

Faisal Sehbai · ‎09-29-2010

Hi,

Yes, you can issue certs for a century if you'd like. :-) For ten years, put in 3650 as the number instead of 1000

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

ericohermoso · ‎10-02-2010

Hello Faisal,

Is NAC version 4.8 is released? If it is already released so I can upgrade my NAC version 4.7 to 4.8?

1. How can I upgrade my NAC to 4.8? Is there any procedures for this?

thanks

Faisal Sehbai · ‎10-02-2010

Hi,

Yes, 4.8 has been out for a bit now. Download it here: http://bit.ly/dwaXlc

Release notes, including the new features, the bug fixes and the upgrade instructions for 4.8 are here: http://bit.ly/9inkeW

HTH,

Faisal

--

If you find this post helpful, please rate so others can find the answer easily

ericohermoso · ‎10-05-2010

Hello Faisal,

I already generate openssl for longer terms, my question is how can i import it to my HA CAM and HA CAS? What I saw in my X509 Certificate is the temporary certificate and I need it to be replaced by my openssl certificate. I mean

Anyways, thanks for the link of version 4.8 I already upgraded my NAC to version to version 4.8.

thank you and best regards