VPN client 5.0.07.0290 cannot connect

Unanswered Question
Jul 27th, 2010
User Badges:

Hello everyone,

I’m trying to connect using the VPN client version 5.0.07.0290 (installed on Windows 7 x64) using a connection entry using a certificate authentication.

The profile host is correct, also the certificate is correct.

However I cannot establish a VPN connection; the same error is reported onto the console log:

Cisco Systems VPN Client Version 5.0.07.0290

Copyright (C) 1998-2010 Cisco Systems, Inc. All Rights Reserved.

Client Type(s): Windows, WinNT

Running on: 6.1.7600

Config file directory: C:\Tools\Cisco Systems\VPN Client\

1      11:16:06.133  07/27/10  Sev=Warning/2         IKE/0xE300009B

Failed to generate signature: Signature generation failed (SigUtil:97)

2      11:16:06.133  07/27/10  Sev=Warning/2         IKE/0xE300009B

Failed to build Signature payload (MsgHandlerMM:489)

3      11:16:06.133  07/27/10  Sev=Warning/2         IKE/0xE300009B

Failed to build MM msg5 (NavigatorMM:312)

4      11:16:06.133  07/27/10  Sev=Warning/2         IKE/0xE30000A7

Unexpected SW error occurred while processing Identity Protection (Main Mode) negotiator:(Navigator:2263)

Could you help me please to understand how to fix these?

Thank you!

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Rahul Govindan Tue, 07/27/2010 - 08:20
User Badges:
  • Silver, 250 points or more

Which CA server(2003,2008 etc) did you generate the Client cert from?Also what is the RSA key length? Is the same working for XP or Vista clients?

tazutmicut Tue, 07/27/2010 - 08:47
User Badges:

Hello rahgovin,

I have exported the certificate from Windows XP x32 using the .p7b format. (with the entire chain)

This certificate was installed on Windows 7 x64.

When I open the Personal store of the Windows 7 x64 the RSA public key of the certificate has 1024 bits.

The CA certificate has the RSA public key of 2048 bits.

The same key lengths are also presented onto the XP x32 store.

Do you have any ideas what is wrong?

Thank you!

Rahul Govindan Tue, 07/27/2010 - 09:14
User Badges:
  • Silver, 250 points or more

Can you try importing the original certs to the Win 7 machine in pkcs12 format with the private RSA keys too?

tazutmicut Thu, 07/29/2010 - 00:42
User Badges:

Hello rahgovin,

Thank you for your help.

I have exported the certificate using the pkcs12 format as you have suggested.

Everything works perfect.

Once again ‘Thank you very much’!

The thread can be closed.

Actions

This Discussion

Related Content