Anyconnect with certificate and without MS certificate server

[Patrick Werner]

Hello community.

Is it possible to use anyconnect with certificate but without a MS certificate server.
I'm thinking of a certificate installed on the asa, and the clientside certificate installed on the laptop or mobile. If the certificate match the client are able to login.
I've heard if you use certificate for anyconnect the asa isn't asking for login credentials, the anyconnect connects without login credentials. I dont like this behavior.
Is it possible to use certificate and the asa is still asking for credentials?

Thanks in advance

Sent from Cisco Technical Support iPhone App

[stojanr · Accepted solution]

Yes to both:
- you can use 3rd party CA to issue certs to both ASA and clients
- you can use hybrid authentication to use both certs and passwords (one-time or static)


Sent from Cisco Technical Support Android App