https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4610263#M1090076 <P>What is the CLI config of the trustpoint?</P> Sat, 14 May 2022 20:00:10 GMT Peter Koltl 2022-05-14T20:00:10Z https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4609779#M1090053 <P>i 'Im currently setting up a anyconnect vpn using multi certificate, and finding that the CRL or OCSP is not working.&nbsp;</P><P>&nbsp;</P><P>Im using a yubikey with the personal certificate on it and a device certificate form a laptop, both of these are signed by our own internal CA. using the the CRL and the OCSP url which is imbedded in the certificate. The the virtual FTD is running version 7.</P><P>What im finding is that when the any of the certificates are revoked by the CA,&nbsp; anyconnect still connects, when it shouldn't.</P><P>&nbsp;</P><P>I have looked in the logs and can't tell if the FTD is doing a CRL or a OCSP check, on the certificates, when to see if they are revoked like it should be.&nbsp;</P><P>&nbsp;</P><P>Any help would be greatly apreaciated to see how i would get this working.&nbsp;</P> Fri, 13 May 2022 12:31:56 GMT https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4609779#M1090053 key_tone_9926 2022-05-13T12:31:56Z https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4609799#M1090054 <P>can I see the any connect tunnel-group and group-policy config ?</P> Fri, 13 May 2022 13:02:11 GMT https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4609799#M1090054 MHM Cisco World 2022-05-13T13:02:11Z https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4610263#M1090076 <P>What is the CLI config of the trustpoint?</P> Sat, 14 May 2022 20:00:10 GMT https://community.cisco.com/t5/network-security/multi-certificate-authenication-with-anyconnect-vpn/m-p/4610263#M1090076 Peter Koltl 2022-05-14T20:00:10Z