topic Re: AnyConnect Posture Certificate error in Network Access Control

AnyConnect Posture Certificate error

wileong — Tue, 12 Jul 2016 15:51:38 GMT

Hi,

IHAC with 3 PSNs and running posturing. Everytime AnyConnect compliance module kicks in, there is a certificate error pop-up. I have verified all certificate - CA and PSNs certificate are in Windows 8.1 Trusted Certificate Store.

What could be the cost of this issue? We do not have any issue when posturing being turned off.

Thanks

Wing Churn

Re: AnyConnect Posture Certificate error

pcarco — Tue, 12 Jul 2016 18:20:11 GMT

Hello, Is this problem isolated to a single machine or wide spread across many users ? Can you please reply with a screenshot and also run the DART on the AnyConnect client and email it to me directly pcarco@cisco.com and i will take a look.

Also. just looking internally at past similar issues - any chance you have upper case letters in the CN of the certificate ?

Best regards,

Paul

AC TME

Re: AnyConnect Posture Certificate error

wileong — Thu, 14 Jul 2016 06:53:57 GMT

Hi Paul,

This has been fixed by regenerating new certificate. Apparently AnyConnect does not like our certificate with an IP Address in SAN.

Removing the IP Address in SAN with just FQDN it works fine.

Regards,

Wing Churn

Re: AnyConnect Posture Certificate error

pcarco — Mon, 18 Jul 2016 18:38:16 GMT

Great to hear it is solved.

Best regards,

Paul