Specifications

Policy Server for Cisco NAC
10-27
Deploying CTA from the OfficeScan Web Console
If you did not select the option to install/upgrade CTA during server installation, you
can do so from the Web console. Before installing/upgrading CTA, deploy the client
certificate to clients.
Note: A Certificate Authority (CA) server generates the client certificate file. Request a
certificate file from your Trend Micro representative.
When you are ready to install/upgrade, check the version of the CTA to be installed in
Cisco NAC > Agent Management, then install CTA to clients in Cisco NAC >
Agent Deployment. The Agent Deployment screen also gives you the option to
uninstall CTA.
Install Windows Installer 2.0 for NT 4.0 on OfficeScan clients running Windows
2000/XP before deploying CTA.
Importing the Client Certificate
The client (or CA) certificate authenticates end-user clients with the Cisco ACS server.
The OfficeScan server deploys the CA certificate to clients along with the Cisco Trust
Agent (CTA). Therefore, import the certificate to the OfficeScan server before
deploying CTA.
To import the certificate:
1. Open the OfficeScan server Web console and click Cisco NAC > Client
Certificate.
2. Type the exact file path of the certificate.
3. Type the full path and file name of the prepared CA certificate stored on the server
(for example: C:\CiscoNAC\certificate.cer). For instructions on preparing a CA
certificate, see CA Certificate Installation on page 10-24.
4. Click Import. To clear the field, click Reset.