Cisco 3.3 - Manual (Page 767)

D-51
User Guide for Cisco Secure ACS for Windows Server
78-16592-01
Appendix D CSUtil Database Utility
Posture Validation Attributes
Deleting a Posture Validation Attribute Definition
The -delAVP option deletes a single posture validation attribute from
Cisco Secure ACS.
Before You Begin
Because completing this procedure requires restarting the CSAuth service, which
temporarily suspends authentication services, consider performing this procedure
when demand for Cisco Secure ACS services is low.
Use the steps in Exporting Posture Validation Attribute Definitions, page D-48 , to
create a backup of posture validation attribute definitions. You can also use the
exported attribute definition file to double-check the vendor ID, application ID,
and attribute ID of the posture validation attribute you want to delete.
To delete posture validation attributes, follow these steps:
Step 1 On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe.
Step 2 Type:
CSUtil.exe -delavp vendor-ID
application-ID
attribute-ID
For more information about vendor, application, and attribute IDs, see Posture
Validation Attribute Definition File, page D-44 .
CSUtil.exe prompts you to confirm the attribute deletion.
Step 3 Examine the confirmation prompt and then do one of the following:
• If you are certain you want to delete the attribute identified by the
confirmation prompt, type Y and press Enter.
Tip You can use the -q option to suppress the confirmation prompt.
• If you do not want to delete the attribute identified by the confirmation
prompt, type N, press Enter, and return to
Step 2 .
CSUtil.exe deletes from its internal database the posture validation attribute you
specified. In the following example, CSUtil.exe deleted an attribute with a vendor
ID of 9876, an application ID of 1, and an attribute ID of 1.