AnyConnect Compliance module error message

[wileong]

During compliance check the following error message pop-up. Any idea how to solve this?

"The requirement cannot be evaluated since you are connected to an untrusted server. Please contact your administrator"

Anyconnect Version = 4.7.01076

Compliance Module = 4.3.562.6144

Thanks

Wing Churn

[hslai]

Not a known issue with ISE.

Please gather a DART bundle from the affected system, open a TAC case if not done already, and submit it to TAC for investigation.

[briankk1582]

Hi Wing Churn,

Were you able to find a solution to this issue?  Do we have to import a certificate from somewhere to the endpoints?

[briankk1582 · Accepted solution]

We've figured out the issue.  It turns out that on some of the posture checks that are run on the newer AnyConnect packages as well the ISE compliance module, they require for the cert being used in ISE to be trusted.  So we exported the self-signed default cert from ISE that we were using and imported it to the endpoint's trusted root certification authorities, and the posture checks were moved forward and continued.

[wileong]

---

Good to hear that. We did not continue further as it was a time sensitive PoV.

Thanks

Wing Churn

[aravikumar]

Hi I run anyconnect 4.10 with latest compliance module. 

I am still getting the pop up

FYI i have the certificates trusted for all services and also it is signed by internal CA.

Still showing this error.

"The requirement cannot be evaluated since you are connected to an untrusted server. Please contact your administrator"