New Cert not accepted

[Sung Paek]

Anyone has solutions ? Cisco Tech was working for 2 weeks, and no result yet.

CERT-C: E ../cert-c/source/certobj.c(1505) : Error #701h

CERT-C: E ../cert-c/source/certobj.c(1517) : Error #72ah

CERT-C: E ../cert-c/source/certobj.c(874) : Error #72ah

CRYPTO_PKI: can not set ca cert object (0x72a)
SSL verify callback: Failed to add the ID cert to the PKI sessionCERT_API: Close session 0x6b30e671 synchronously

[mgendell]

I was having the exact same issue today. In my case the problem turned out to be that the user trying to connect didn't have admin privileges on her computer so it was unable to provide the certificate to the ASA. If I run AnyConnect with elevated permissions ("Run as administrator") then AnyConnect connects perfectly fine. Still trying to figure out the permission thing on Windows but at least in my case it appears to be a workstation issue, not an ASA issue.

Hope that helps,

Martin