anyconnect phone vpn license issue

[Mangesh Kamerkar]

 Recently we downloaded evalution version of anyconnect phone vpn license, activated it and configured cisco ASA with identity certificate and downlaoded cisco CM maunfacturing CA certificate from call manager. we also configured call manager with identity certificate. we tested phone calls  and everything worked fine then we shipped 15 nos of ip phone (8941) across the glode. i was happy man.

 3 days back we purchased anyconnect phone vpn license and activated it, now my remote phone are not able connect through vpn, we are getting  the error msg as " unable to connect vpn due to invalid certificate".

how to resolve this issue without bringing all those ip phone in HO??

regards,

Mangesh

[Marvin Rhoads]

Normally we would see this if/when the ASA certificate has changed. You didn't perhaps have failover of an HA pair of ASAs did you?

Can you compare the certificate you originally exported to CM from the ASA to the one currenlty on the ASA? It should be easy to confirm if the PEM-formatted text file of the certificate is the same.