Deleting a posture validation attribute definition – Cisco 3.3 User Manual

Page 767

Advertising
background image

D-51

User Guide for Cisco Secure ACS for Windows Server

78-16592-01

Appendix D CSUtil Database Utility

Posture Validation Attributes

Deleting a Posture Validation Attribute Definition

The -delAVP option deletes a single posture validation attribute from
Cisco Secure ACS.

Before You Begin

Because completing this procedure requires restarting the CSAuth service, which
temporarily suspends authentication services, consider performing this procedure
when demand for Cisco Secure ACS services is low.

Use the steps in

Exporting Posture Validation Attribute Definitions, page D-48

, to

create a backup of posture validation attribute definitions. You can also use the
exported attribute definition file to double-check the vendor ID, application ID,
and attribute ID of the posture validation attribute you want to delete.

To delete posture validation attributes, follow these steps:

Step 1

On the computer running Cisco Secure ACS, open an MS DOS command prompt
and change directories to the directory containing CSUtil.exe.

Step 2

Type:

CSUtil.exe -delavp

vendor-ID

application-ID
attribute-ID

For more information about vendor, application, and attribute IDs, see

Posture

Validation Attribute Definition File, page D-44

.

CSUtil.exe prompts you to confirm the attribute deletion.

Step 3

Examine the confirmation prompt and then do one of the following:

If you are certain you want to delete the attribute identified by the
confirmation prompt, type Y and press Enter.

Tip

You can use the -q option to suppress the confirmation prompt.

If you do not want to delete the attribute identified by the confirmation
prompt, type N, press Enter, and return to

Step 2

.

CSUtil.exe deletes from its internal database the posture validation attribute you
specified. In the following example, CSUtil.exe deleted an attribute with a vendor
ID of 9876, an application ID of 1, and an attribute ID of 1.

Advertising