Tactest:~$ ls /opt/.cisco/certificates/caĬACERT.pem VeriSignClass3PublicPrimar圜ertificationAuthority-G5.pem To use Linux OS certificate store, PEM file-based certificates are placed in these directories. This document is based on client certificate authentication using a Linux OS (PEM) certificate store.ġ. Backgound Informationįor a successful client certificate authentication on Linux devices, An圜onnect secure mobility client supports the following certificate stores:

If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment. Copy the An圜onnect VPN client to the ASA's flash memory, which is then downloaded to the remote user computers in order to establish the SSL VPN connection with the ASA. Note: Download the An圜onnect VPN Client package (anyconnect-linux*.pkg) from the Cisco Software Download ( registered customers only) site. The information in this document is based on these software and hardware versions:Ĭisco Adaptive Security Appliance ASA5585-SSP-20Ĭisco Adaptive Security Appliance Software Version 9.9(2)36Īdaptive Security Device Manager Version 7.9(1)

SSLVPN configuration on the Cisco ASA Head End This document assumes that the ASA is fully operational and configured to allow the Cisco Adaptive Security Device Manager (ASDM) or Command Line Interface (CLI) to make configuration changes.Ĭisco recommends that you have knowledge of these topics: This document describes a configuration example for Adaptive Security Appliance (ASA) Cisco An圜onnect Secure Mobility Client access that uses client certificate for authentication for a Linux Operative System (OS) for an An圜onnect user to connect successfully to an ASA Headend.Ĭontributed by Dinesh Moudgil, Cisco HTTS Engineer.

Cisco anyconnect ubuntu