Client Certificate Selection Anyconnect

[Spiffyman]

Hello,

I have a Cisco ISR 1111X-8P setup with Ikev2 ipsec vpn with certification authentication. I'm trying to get the anyconnect client to make the user chose which certificate to present to the router in order to pipe them into various internal networks. I have a profile created under C:\ProgramData\Cisco\Cisco AnyConnect Secure Mobility Client\Profile\myprofile.xml with the line <AutomaticCertSelection UserControllable="false">false</AutomaticCertSelection> added before my server list. This does not seem to work and windows/anyconnect will select the cert to use automatically.

Kind regards,

Euki

[Spiffyman]

Marius,

I have my xml setup as follows. Would the above go into the xml before <server list> section?

<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/AnyConnectProfile.xsd">

<ServerList>
<HostEntry>
<HostName>MyVPN</HostName>
<HostAddress>x.x.x.x</HostAddress>
<PrimaryProtocol>IPsec
<StandardAuthenticationOnly>true
<AuthMethodDuringIKENegotiation>IKE-RSA</AuthMethodDuringIKENegotiation>
</StandardAuthenticationOnly>
</PrimaryProtocol>
</HostEntry>
</ServerList>

</AnyConnectProfile>