CISCO ANYCONNECT V.4.3.02039 issues on ASA 5510 - need help - See attachment

[MocoSport95]

I have attached the ASA firewall configuration and firewall logs errors.

We cannot get AnyConnect to work on our firewall. If anyone can review the config and logs I attached.That would much appreciated. We have been stuck with this issue for days. We are using IOS 9.1.7 for the ASA 5510.

Look forward to your replies.

Thank you.

APA

[Ajay Saini]

Looks like the root certificate is missing here. ASA does not know the identity of Digicert and hence can't trust it. I am assuming that you did not generate CSR from ASA. You would ideally need to upload the identity and CA certificate separately or PKCS12 format which consists of identity cert, CA and private key bundled together. 

Did you follow one of the methods defined in below link:

http://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/200339-Configure-ASA-SSL-Digital-Certificate-I.html

-AJ