I have a problem using an ASA 5510 8.0(2) with smartcard certificate based authorisation, SSL VPN, CSD and AnyConnect 2.1.

It works 100% every time I access the ASA using a web browser. CSD does its thing and I get authenticated OK.

However, when using the anyConnect client directly, Authentication seems to assign users to the default group, which then fails. Once I've got around that, the client says CSD is not loaded and then after pressing ok, appears to be loading CSD but hangs and does nothing.

If I use LDAP or other authentication mechanisms its ok. Or if I turn off CSD, it works OK. but I just cant get that combination to all work.

Any ideas?