Windows server 2012 and cisco anyconnect x509 certificate.

[ignbeltr1]

Hi mates, I have a client that is in the need to implement a certificate x509 for computers authentication that are over vpn using anyconnect. the question is how create that certificate. if is on Windows side or in the ASA side? and how?.

Server is a Windows 2012 clients are xp, w7 and Windows 8.1

Regards,

[petenixon]

Hi,

You will need to request a CA certificate from your organisations CA server http://CA-IP-Address/certsrv (assuming your Windows 2012 server is your CA). Once you have this certificate, you install this onto your ASA. 

Next, you will need to request a user certificate from the same CA and install on the client device.

Obviously, you will also need to configure Anyconnect for certificate authentication :)

[ignbeltr1]

Thanks...... and last question the certi an oscp?

[petenixon]

This should help with OCSP:

http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/116720-config-asa-ocsp-00.html