To use the Firefox (NSS) certificate store, users can import their certificate by Firefox. Change the extension of certificates from. Download the User Identity Certificate (Base64 encoded) with extension.
Download the CA Certificate (Base64 encoded) with extension. If you use a Windows Certificate Authority:ġ. Note: By default, the path to install the client certificate and the private key is not present, so it needs to be manually created with this command: Tactest:~$ ls /home/tactest/.cisco/certificates/client/private home/tactest/.cisco/certificates/client/private Tactest:~$ ls /home/tactest/.cisco/certificates/client Tactest:~$ ls /opt/.cisco/certificates/caĬACERT.pem VeriSignClass3PublicPrimar圜ertificationAuthority-G5.pem To use Linux OS certificate store, PEM file-based certificates are placed in these directories. This document is based on client certificate authentication that uses a Linux OS (PEM) certificate store.ġ. Background Informationįor a successful client certificate authentication on Linux devices, An圜onnect secure mobility client supports these certificate stores: If your network is live, ensure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment.
Copy the An圜onnect VPN Client to the ASA flash memory, which is then downloaded to the remote user computers in order to establish the SSL VPN connection with the ASA. Note: Download the An圜onnect VPN Client package (anyconnect-linux*.pkg) from the Cisco Software Download site. The information in this document is based on these software and hardware versions:Ĭisco Adaptive Security Appliance ASA5585-SSP-20Ĭisco Adaptive Security Appliance Software Version 9.9(2)36Īdaptive Security Device Manager Version 7.9(1) SSL VPN configuration on the Cisco ASA Head End This document assumes that the ASA is fully operational and configured to allow the Cisco Adaptive Security Device Manager (ASDM) or Command Line Interface (CLI) to make configuration changes.Ĭisco recommends that you have knowledge of these topics: The configuration example described in this document is for Adaptive Security Appliance (ASA) Cisco An圜onnect Secure Mobility Client access that uses client certificate for authentication for a Linux Operative System (OS) for an An圜onnect user to connect successfully to an ASA Headend. This document describes a configuration example for Adaptive Security Appliance (ASA) Cisco An圜onnect Secure Mobility Client access.
0 kommentar(er)
