Certificate validation failure for device based authentication

[mojo-BD]

Update: The issue has now been resolved

Just one user is experiencing the issue
But another user can connect using the same machine when the other user login

Also, from the login screen, can connect

SO its mainly break when the particular user logged in

One error log from event viewer

Function: CCertStore::GetCertificates

File: c:\temp\build\thehoff\vpn\commoncrypt\certificates\certstore.cpp

Line: 225

Ignoring client certificate because it does not contain the required EKU extension. Certificate details:

Store: Microsoft Machine, 

[pieterh]

this does not sound like a Cisco problem? this is a client  issue.

my guess is the certificate needed to be in the computer-certificate store, but was loaded in a user-specific certificate-store

[mojo-BD]

Thank you for the suggestions
Yes figured it out
The app was set to select any certificate like client one or device one, and it was trying to use the user certificate (obviously) , the user store had two similar certificate (which is weird) , so it was failing as it cant detect which one to use.

We have revoked the cert from the user from AD and republish it, worked