Cisco 3.3 - Manual (Page 406)

Chapter 10 System Configuration: Authentication and Certificates
Global Authentication Setup
10-26
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
For information about how master key and PAC TTL values determine whether
PAC provisioning or PAC refreshing is required, see
Master Key and PAC TTLs,
page 10-21 .
Step 3 Determine whether you want to use automatic or manual PAC provisioning. For
more information about the two means of PAC provisioning, see
Automatic PAC
Provisioning, page 10-18 , and Manual PAC Provisioning, page 10-20 .
Note We recommend limiting the use of automatic PAC provisioning to initial
deployments of EAP-FAST, followed by using manual PAC provisioning
for adding small numbers of new end-user clients to your network and for
replacing PACs based on expired master keys.
Step 4 Using the decisions during Step 2 and Step 3 , enable EAP-FAST on the Global
Authentication Setup page. For detailed steps, see Configuring Authentication
Options, page 10-33 .
Cisco Secure ACS is ready to perform EAP-FAST authentication.
Global Authentication Setup
The Global Authentication Setup page provides a means to enable or disable some
of the authentication protocols supported by Cisco Secure ACS. You can also
configure other options for some of the protocols represented on the Global
Authentication Setup page.
This section contains the following topics:
• Authentication Configuration Options, page 10-27
• Configuring Authentication Options, page 10-33