certificate validation failure cisco anyconnect

Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Initiating VPN connection to the secure gateway Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Message type information sent to the user: /vpn/Api/ApiCert.cpp Line: 339 Number of certificates found: 0 Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Function: getCertList File: That the selected host is in the server list section of the profile and that the profile is Some settings (e.g.Ĭertificate matching) may not function as expected if a local profile is expected to be used. Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Using default preferences. /vpn/Api/ProfileMgr.cpp Line: 100 No profile is available. Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Function: loadProfiles File: /vpn/Api/ProfileMgr.cpp Line: 888 Profile () not found. Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Function: getHostInitSettings File: /vpn/Api/ProfileMgr.cpp Line: 808 No profile available for host. Mar 15 16:16:22 DUpton-mbp13.local acvpnui: Function: getProfileNameFromHost File: Mar 15 16:16:22 DUpton-mbp13.local acvpnui: An SSL VPN connection to has been requested by the user. Ive omitted some sensitive information as well. Any help you can provide would be greatly appreciated. Ive tried parsing this file but cant figure it out. Here is the contents of the /var/log/system.log file for a particular connection attempt. For the life of me I cannot figure out why the ASA is not accepting the cert from this particular users Mac.

We have verified the cert is available in the cert store on the Mac and that the cert is also available on the ASA-5545x. We have deployed the cert to all mobile end user devices in our company (Windows machines and Macs), all are working except for one Mac user that gets the 'Certificate Validation Failure' message when trying to connect. Our VPN users use the Anyconnect client version 5 for both Mac and PC. We recently enabled multi-factor authentication for our Remote Access VPN using both certificate and user credentials.

Certificate validation failure cisco anyconnect