Meraki AnyConnect VPN - Client Authentication - HELP

[Street_1991]

Hi All

Im wondering if someone could help me out on this one, Im attempting to configure Certificate authentication on the client side as well as UN/PW. 

Im wanting to use an SSL cert from 3rd party provider. However when adding the CA cert into the MX and then into the User > Personal cert store, all i get is Certificate Validation Error. 

Has anyone experienced this before and if so, how did you get around it? 

Kind Regards

[alemabrahao]

Are you using Anyconnect? Because this only works on Anyconnect.

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication

https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Managing_and_Troublesh...

[Street_1991]

Hi, 

Yep, using Anyconnect. Ive followed those instructions but it still states that the certificate validation failed... 

Cheers

Matt 

[alemabrahao]

Have you opened a support case?

[Street_1991]

Hi, yes, but they are next to useless. 

I've uploaded the CA cert in PEM format to the MX, which shows its been issues from and to the same place. Then installed the same (in .crt form) to the client machine in the User > Personal > Certificate store. 

Still getting the certificate validation error. 

It will work when our wildcard cert is installed in the local machine cert store, but we dont want to have that installed on all machines where possible. 

Cheers

Matt