topic Re: AnyConnect Posture Certificate Warning in Network Access Control

AnyConnect Posture Certificate Warning

Antonio Macia — Tue, 30 Jul 2019 08:54:00 GMT

Hello,

Every time the AnyConnect posture process starts, it warns about untrusted certificate for the PSN it is connecting. Certificates are self-signed and the computer has the root and intermediate CAs certificates added into the user trusted stores. If I open a browser and type the same PSN FQDN, I don't get any warning.

Why AnyConnect is not looking at the local user stores?

Regards.

Re: AnyConnect Posture Certificate Warning

Surendra — Tue, 30 Jul 2019 09:27:53 GMT

What does the warning say ?

Re: AnyConnect Posture Certificate Warning

Antonio Macia — Tue, 30 Jul 2019 10:33:25 GMT

Hi,

It says "AnyConnect cannot verify server: xxxxx.corporatedomain Certificate is not trusted"

I've unchecked the "Block connections to untrusted servers"

My user has local admin rights on the computer.

Regards.

Re: AnyConnect Posture Certificate Warning

paul — Tue, 30 Jul 2019 13:20:30 GMT

Did you check your client provisioning portal as well? That is a different certificate. Connect to the FQDN on 8443 and see if you get a certificate warning.

Re: AnyConnect Posture Certificate Warning

Antonio Macia — Tue, 30 Jul 2019 15:12:34 GMT

It is the same than the administration portal. I use the default group. When I access using the browser I don't get any warning. Any idea?

Re: AnyConnect Posture Certificate Warning

Nidhi — Tue, 30 Jul 2019 16:15:31 GMT

You might be hitting this bug CSCut30037

Also please have a look at the post here here with similar issue