Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have assigned a new SSL certificate from an external provider and wanted to get client certificate checking working, previously the ASA was using an internal CA to provide the Identity certificate for the trust points but since adding the new SSL cert vpn will work with just AAA but no longer with AAA Certificate. From my understanding the as long as the internal CA is imported into the ASA should be able to authenticate the user certificates provided to the users by the internal CA but this doesnt seem to be the case anyone able to shed some light on this situation?