Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We will be migrating over to a new CA this year, so I need Anyconnect to match on more than one possible ISSUER-CN. Since all devices won't be cut over to the new CA all at once, I need it to effectively:-send any cert from existing CA1 -OR--any cert...
For anyone else that ran into this use case, this is how i solved it.-You need to enable ISSUER-CN wildcardsNOTE: Luckily for us both the old and the new CAs names share some of the same strings, so i'm matching on them. But they are to be interprete...
Step 4 doesn't work as advertised. I have this exact issue and had already done what it looks like you recommend here.. and I get a cert validation error. It seems to be doing an AND not an OR. Also you shouldn't need to distribute the new xml to ex...
