topic Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client in Network Security

cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

VS3737 — Thu, 21 May 2020 17:21:54 GMT

Hi, Is it possible to download self-signed certificate from cisco IOS router to update on a computer.

We are trying to stop warning messages pop-up while connecting to anyconnect VPN client.

Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

balaji.bandi — Thu, 21 May 2020 20:14:00 GMT

yes you can generate certificate and install in windows so the warning is disappears

is this for public use or for testing ?

https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/215118-ios-self-signed-certificate-expiration-o.html

Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

VS3737 — Thu, 21 May 2020 20:33:16 GMT

Hi Balaji,

Thank you for the response. This will be used publicly.

Could you please share the steps to download self-signed certificate & install it on pc.

Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

balaji.bandi — Thu, 21 May 2020 21:33:43 GMT

if this is used public faced internet side i would strongly suggest not go with self signed ceritificate - it will be security concern here.

i would prefer to Public CA , like Godday to sign the certificate.

Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

VS3737 — Fri, 22 May 2020 13:47:15 GMT

Balaji, Thank you for the suggestion but as of now I am trying to find solution for self-signed certificate. I would appreciate if you can assist me with the steps.

Re: cisco ios router self-signed certificate warning pop-up on anyconnect VPN client

balaji.bandi — Fri, 22 May 2020 16:40:18 GMT

Ok still you like to take risk, that is your business at risk

any way - the document i was provided has steps, how to generate certificate.

Once it is generated, copy to TFTP Server and install the Certicate to Windows PC and register it, so it will not give you any more warning- since it is in trusted list.