Renewal of Custom AnyConnect Client VPN certificate in China Organization

[Henning_E]

Hello,

we created a chinese Meraki Dashboard account for our chinese factory a few weeks ago, and after moving the devices and licenses to the CN account as well as rebuilding the config from the global dashboard, we realized that AnyConnect Client VPN is not working anymore.

After some research i read in the Meraki documentation that "auto-generated" certificate for AnyConnect Client VPN is not supported in China dashboard. 

So we chose "Custom" option, generated a CSR in the MX dashboard, got it signed by our CA partner, and uploaded the certificate to the dashboard. So AnyConnect is working againg by now.

BUT, we just went with a testing certificate which is only valid for 30 days, since we had problems getting the Dashboard to accept the certificate in the first place.

So now i want to renew the certificate with a real certificate.

Question:

How do i handle this with minimal impact for end users?

If i generate a new CSR on the Meraki Dashboard, will the existing one be wiped rightaway, or will it happen when i hit "save"?

I want to keep the time windows between generating the CSR and our CA getting back to us with the new certificate as low as possible.

Appreciate your feedback and experiences with this topic.

Thanks for your help, kind regards

Henning

[alemabrahao · Accepted solution]

Generating a new CSR will not immediately invalidate the currently uploaded certificate.

The currently active certificate remains in use until you upload a new one and click Save.

[Henning_E]

Ok, thanks for the help. So i just generated a new CSR and downloaded it, without the current setup being impacted. Thanks for the clarification.