Hello,
I'm having an issue with downloading the client certificate for AnyConnect clients.
Right now I have a Local CA defined on my ASA5505 9.1.6 and a Split Tunnel profile setup to authenticate via Certificate.
From a remote site, I can access https://myasa.mydomain.com and see the Portal page with all my profiles (I have working profiles with Local auth), and I see my newly created "Certificate Split Tunnel". When I click on this profile, the username/password field goes away and I'm presented with just "Logon" (so far, so good). I immediately get an Invalid Certificate error and I'm never prompted to use my OTP in order to download the Client Certificate.
As an FYI, I initially changed one of my other working profiles to use Certificates and the first time I tried, I was prompted to download the Client Certificate and everything worked. That's when I decided to create a profile dedicated to Cert use. To add to this, on the machine that I got it to work once, I can successfully AnyConnect to the "Certificate Split Tunnel" profile because I had already downloaded the Client Cert previously.
I just can't get the prompt for the new profile.
Any ideas?
Best,
