AnyConnect and client certificate

[Mikael Gustafsson]

Hi,

I was looking at 'BRKSEC-3033 - Advanced AnyConnect Deployment' on Ciscovirtuallive.

On that session the presenter says that:

"Issuer of client certificate may not be the same as the issuer of the ASA certificate."

With my basic PKI understanding :-),  anyone know why you cant have the same certificate issuer? 

It's a good presentation, can recommend it.

BR

Micke

[Julio Carvajal]

Hello Mikael,

You DO can have the same certificate issuer!!

I think he said it was an option to not have it with AnyConnect but as your PKI understanding  states you do can have it like that.

Regards,

Julio

Do rate all the helpful posts