There were several postings online. This may not be the best or only fix but this is what worked for me.
So here is the work-around that I used to resolve the issue.
1. Go to the ASA IP address in IE.
2. Select Continue to website. (This is where it asks if you want to install the ASDM Launcher)
3. In the Address Bar click on "Certificate Error" then "View Certificates."
4. Go to Details tab and select "Copy to File" and export the cert to my desktop using the default DER format.
5. Open Java Control Panel and go to "Security" tab and "Manage Certificates."
6. Selected "Secure Site" in drop down box and clicked "Import."
7. Select "All Files" in drop down box, and selected the Cert that I exported from IE.
Some of my customers told me that the “copy-to” button was grayed out, this is because the IP is not in the trusted zone.
Here is the fix for that if needed
Then use the webstart ASDM if all of the above fails. :-/
Unfortunately, Java Webstart did not work with me, at least not before I added the ASA URL to the exception list of Java Control Panel.
Go to Java Control Panel, Security tab, then click Edit Site List, and add the URL of your ASA (https://ASAIPAddress)
I got the same issue and the solution is import SSL certificate of the ASA to Certificate Snap-in:
- Open https:\\asaipaddress
- Export certificate to ABC.cer (up to browsers)
- Start\Run => mmc
- File => Add\Remove Snapin
- Select Certificate \ Computer Account \ Local Computer
- Import ABC.cer to:
- Trusted root certification authorities
- Intermediate certification authorities
Thanks! I was able to follow you up to the point of importing the certificate to Personal Trusted and Intermediate. WHere do I get the cert to install? I don't recall the step to actually save a .cer file.
That's first step: Open web browser, browse to ASA address. And the way to export .CER file is based on each particular browser.
I'm sure there are more elegant solutions I could hack with, but....
Your solution to go through IE and add the security certificate worked, and just saved me literally hours of effort.