Hi,
We have a use case for Windows 10 tablets to connect to a remote access VPN using certificates.
This is working perfectly with machine certificate and user certificate on a USB smartcard (Yubikey).
The problem is that the VPN drops when the Yubikey smartcard is removed.
I fully understand that from a security perspective this is a good thing but the Yubikeys will be damaged quickly if permanently connected physically so we'd like to allow the RAVPN to stay up after the Yubikey is removed from the USB port.
I believe this was possible with the old IPSEC VPN client and ASA with a group-policy parameter called 'smartcard-removal-disconnect disable'
I found this enhancement request: https://bst.cloudapps.cisco.com/bugsearch/bug/CSCtf65383
Headend is FMC managed FTDv running 7.0.1.
Clients are using latest AnyConnect client.
Anybody know if this is possible?
Many thanks,
Matt.
