AnyClientVPN - Authentication using Certificate

[parveesm123]

Hi All,

I am trying to configure Anyclient VPN authentication using certificate.

for testing purpose , i have made ASA as CA .

I am always getting certifcate validation error , ( it has option of get certificate and i download the cerrtificate to PC using OTP )

but still it is showing certificate validation error.

i didnt find any good documents which throw lights to this

can anyone assist me configuring AnyClient VPN authentication using certificate?

thanks,

Parvees

[Javier Portuguez]

Hi Parvees,

Does the machine (AC client) have the correct certificates? Please use the "MMC" tool (Windows start menu, run command, mmc, File -> Add/remove snap-in->Certificates->My user account) to verify this.

In case you don't the see the right information (root and identity certificates), please delete whatever it has received from the ASA through the AnyConnect client and use the Web form instead:

https://hostname/+CSCOCA+/enroll.html

Also, please use the following commands in order gather further information (during a connection attempt):

debug crypto ca 255

debug crypto ca mess 255

debug crypto ca transactions 255

I hope to hear back from you.

Thanks for posting on CSC.