nacclcert
The client (or CA) certificate authenticates end-user clients with the Cisco ACS server. The OfficeScan server deploys the CA certificate to clients along with the Cisco Trust Agent (CTA). Therefore, import the certificate to the OfficeScan server before deploying CTA.
To import the certificate:
Open the OfficeScan server web console and click Cisco NAC > Client Certificate.
Type the exact file path of the certificate.
Type the full path and file name of the prepared CA certificate stored on the server (for example: C:\CiscoNAC\certificate.cer). For instructions on preparing a CA certificate, see CA Certificate Installation.
Click Import. To clear the field, click Reset.