Anyconnect Certificate Authentication on Meraki Firewall running MX 16.9 beta

[KayiAlp]

Our Meraki firewall runs MX 16.9 beta version. We have configured Anyconnect as our client VPN. We want to enable certificate authentication on Anyconnect and want to use machine-based certificates.

I created an enterprise CA and deployed machine-based (computer) certificates to test machines. I exported the certificate and uploaded it under Certificate Authentication but it is still unable to authenticate when trying to connect to the VPN on test machines. I have also updated the profile by checking Certificate Store Override and configuring key usage and extended key usage in certificate matching.

Has anyone tried configuring certificate authentication for Anyconnect? If so, how did you make it work? Please advise, Meraki Support was not able to provide much information.

[cmr · Accepted solution]

@KayiAlp you need to upgrade to 16.11, that feature is broken in 16.8 and 16.10

[KayiAlp]

@cmr  that worked, thank you! Appreciate the help!

[Dudleydogg]

So does Certificate Authentication work, because I see a note in the config that says it will use Certificate before STILL asking for user Credentials?