How to Retrieve and Decrypt Support Bundle in ACS 5.X for troubleshooting authentication, accounting and authorization issues. Introduction: This document describes the process of retrieving the support bundle using GUI followed by decrypting the same bundle using CLI. Requirement: Support bundle is same as package.cab file of 4.X acs code, however in 5.x, we get support bundle in encrypted format and hence we need to decrypt the bundle to get the actual logs required for troubleshooting issues like, authentication, authorization and accounting. Prerequisites: 1. ACS appliance running software versions 5.X 2. Putty software Procedure: Step 1 Login to ACS using GUI, to retrieve the support bundle for decryption Step 2 Enter the credentials to login and you will see the following GUI main page-- Step 3: Now to retrieve the support bundle, select Monitoring and Reports > Troubleshooting > ACS Support Bundle. Step 4 Ftp the support bundle to a local ftp, i-e, Copy paste the collected support bundle to a local ftp server (172.16.182.201 in our example). Step 5: Now SSH to the ACS 5.1 server – Step 6: Now login into ACS using CLI to create a local repository name as FTP(where FTP is just a name of repository) , please refer the following commands once you logged in-Configure terminal repository FTP url ftp://172.16.182.201 (where 172.16.182.201 is the ip address of ftp server) user cisco password plain cisco123 (this username is the one you define on FTP server to authenticate) exit Please refer the screenshot for the same--- Step 6.5: Now once the repository (FTP) is created, then we need to decrypt the bundle. To decrypt the bundle, Enter acs-config mode by entering acs-config and entering the acs admin credentials acs51/acsadmin(config-acs)# decrypt-support-bundle ftp acs.tar.gzDecrypting Support Bundle... Repository: ftp Support Bundle: acs.tar.gz Decryption completed successfully - decrypted bundle: dec_38134.tar.gz is located on your repository. Refer the following screenshot for the same---- Once the file is decrypted then please log back to FTP server to retrieve the decrypted file. The decrypted file in our case is dec_38134.tar.gz (You will get the name of file in “Decryption completed successfully - decrypted bundle: <Name of decrypted bundle>”) dec_38134.tar.gz is the decrypted support bundle .Just use winzip to open its contents. You may use the decrypted support bundle for own troubleshooting, or provide the same to Support Community or TAC to get the speedy response on the issues.