Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Create a new article
1171
Views
0
Helpful
0
Comments

VPN Client is unable to connect to Cisco Adaptive Security Appliance (ASA) 5540 version 7.2(1) using certificates and the "no suitable trustpoint found to validate certificates" error message displays

TCC_2
Level 10
Level 10

on ‎06-22-2009 05:02 PM

Core issue

This problem occurs due to the presence of Cisco bug ID CSCse14296.


The VPN Client is not able to connect to Cisco ASA 7.2(1) if the root certificate authority (CA) has two subordinate CAs. The ASA identity certificate and the VPN Client identity certificate are issued from two different subordinate CAs. However both have the same root CA.

Resolution

For a workaround, perform either one of these two methods:

  • Enroll the ASA on the trustpoint. (This is difficult in some cases.)

  • Upgrade the ASA software to version 7.2.1.9.
Labels:
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents