VPN anyconnect problem

[marcio.tormente]

Hello friends!

I´ve been trying to configure anyconnect VPN, but I cant generate the CA, probably I´m doing sothing wrong.

To be honest, I don´t know if the the problem int this VPN is only CA that is missing, but is the only thing that I saw that can make problem.

Anyone knows how to generate CA in the ASA?

[Aditya Ganjoo · Accepted solution]

Hi Marcio,

Please follow this link:

https://supportforums.cisco.com/document/12597006/how-configure-asa-ca-server

Do you want certificate based authentication for the Anyconnect users ?

I am not sure that we really need a CA in this case.

You can try checking this third party link for configuring basic Anyconnect setup on ASA:

http://www.petenetlive.com/KB/Article/0000943

Regards,

Aditya

Please rate helpful posts.

[marcio.tormente]

Aditya,

Thanks for your support.

Yes, I want certificate to my anyconnect VPN works, because the error that I can see is about missing certificate.

I made the configuration from your link, but he say that is alredy done and ask if I want to do again, I did, but when I go to ASDM "Configuration > Remote Access VPN > Certificate Management > CA Certificates" and try to ADD a certificate based on trustpoint, I receive the error msg.

[Aditya Ganjoo]

Hi Marcio,

Could you configure 'no ca-check' command in the trust point configuration to use this

certificate ?

Regards,

Aditya

Please rate helpful posts.

[marcio.tormente]

Thanks Aditya,

I made all configuration again and now is working.

[Aditya Ganjoo]

Hi Marcio,

Happy to help.

Regards,

Aditya

[m.velazquez]

What exactly does the no ca-check command do?

[marcio.tormente]

Follow the error msg when I try to install CA.