No profile available for host

[ColinSutton11454]

I have just installed AnyConnect 4.8.01090 and my organisation's  VPN certificate on my iMac running Catalina 10.15.3,

When I try to connect I get the message 'Certificate Validation failure'.

The system log shows :

default 03:57:53.304337+1100 Cisco AnyConnect Secure Mobility Client Function: getUserName File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 2604 PasswordEntry username is colin

default 03:57:53.333496+1100 Cisco AnyConnect Secure Mobility Client Function: PeerCertVerifyCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 998 Return success from VerifyServerCertificate

default 03:57:53.338350+1100 Cisco AnyConnect Secure Mobility Client Function: ClientCertSetCB File: ../../vpn/Api/CTransportCurlStatic.cpp Line: 1104 Client certificate requested by peer

default 03:57:53.425563+1100 Cisco AnyConnect Secure Mobility Client Function: processResponseStringFromSG File: ../../vpn/Api/ConnectMgr.cpp Line: 12155 Client certificate requested by peer (via AggAuth)

default 03:57:53.425620+1100 Cisco AnyConnect Secure Mobility Client Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 1256 No profile available for host ctcvpn.ctc.usyd.edu.au.

default 03:57:53.425647+1100 Cisco AnyConnect Secure Mobility Client Function: getHostInitSettings File: ../../vpn/Api/ProfileMgr.cpp Line: 1340 Profile () not found. Using default settings.

error 03:57:53.425663+1100 Cisco AnyConnect Secure Mobility Client Function: certAuthHasFailed File: ../../vpn/Api/ConnectMgr.cpp Line: 16802 Certificate authentication requested from gateway, no valid certs found in users cert store.

default 03:57:53.425678+1100 Cisco AnyConnect Secure Mobility Client Message type warning sent to the user: No valid certificates available for authentication.

What do I need?

[Sheraz.Salim]

logs show No valid certificates available for authentication.

a very similar issue is discussed here and here 

[ColinSutton11454]

Neither of those links seem relevant to connection to MacOS

[Sheraz.Salim]

check this

https://community.cisco.com/t5/vpn/anyconnect-got-an-error-after-updating-macos-catalina/td-p/3937692

!

https://208.74.205.244/t5/vpn/macos-catalina-10-15-support/td-p/3878536/page/5

[ColinSutton11454]

@Sheraz.Salim I followed the instructions in the first link to set <ExcludeMacNativeCertStore> to true, now get different error messages:

default 10:22:51.291804+1100 Cisco AnyConnect Secure Mobility Client Using default preferences. Some settings (e.g. certificate matching) may not function as expected if a local profile is expected to be used. Verify that the selected host is in the server list section of the profile and that the profile is configured on the secure gateway.

default 10:22:51.292224+1100 Cisco AnyConnect Secure Mobility Client Function: getProfileNameFromHost File: ../../vpn/Api/ProfileMgr.cpp Line: 1256 No profile available for host [###########]

default 10:22:51.292249+1100 Cisco AnyConnect Secure Mobility Client Function: getHostInitSettings File: ../../vpn/Api/ProfileMgr.cpp Line: 1340 Profile () not found. Using default settings.

default 10:22:51.292331+1100 Cisco AnyConnect Secure Mobility Client Message type information sent to the user: 

The sources in the second link from @jim.rice are not available to me.