Cisco ASA Identity Cert

[dasgill]

I have removed a soon to be expired identity certificate from Cisco 5516X appliance and added a new identiy certificate which expires in 2021. Anyconnect VPN connections to the appliance is still using the certificate that has been removed. Wondering if the identiy certs for anyconnect certificate authentication is cached on the ASA. I need all references clear so the new ID certificate is used.

[Karsten Iwen · Accepted solution]

Did you sign the new certificate to the interface?

ssl trust-point VPN-2019 outside

And do a 

show run | i VPN-2019

where "VPN-2019" is the name of your old trust point.

[dasgill]

Thank you very much. The new cert was not signed to the outside interface. Done. Works now.