Cisco 3.3 - Manual (Page 765)

D-49
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix D CSUtil Database Utility
Posture Validation Attributes
• To preserve the file, type N, press Enter, and return to Step 2 .
CSUtil.exe writes all posture validation attribute definitions in the file specified.
To view the contents of the file, use the text editor of your choice.
Importing Posture Validation Attribute Definitions
The -addAVP option imports into Cisco Secure ACS posture validation attribute
definitions from an attribute definition file. For an explanation of the contents of
a posture validation attribute definition file, see
Posture Validation Attribute
Definition File, page D-44 . For an example of an attribute definition file, see
Default Posture Validation Attribute Definition File, page D-52 .
Before You Begin
Because completing this procedure requires restarting the CSAuth service, which
temporarily suspends authentication services, consider performing this procedure
when demand for Cisco Secure ACS services is low.
Use the steps in Exporting Posture Validation Attribute Definitions, page D-48 , to
create a backup of posture validation attribute definitions. You can also use the
exported attribute definition file to double-check the vendor ID, application ID,
and attribute ID of current posture validation attributes.
To import posture validation attributes, follow these steps:
Step 1 Use the discussion in Posture Validation Attribute Definition File, page D-44 , to
create a properly formatted attribute definition file. Place the file either in the
directory containing CSUtil.exe or a directory accessible from the computer
running Cisco Secure ACS.
Step 2 On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe.
Step 3 Type:
CSUtil.exe -addavp filename
where filename is the name of the file in which you want CSUtil.exe to write all
attribute definitions. Press Enter.