Cisco Cisco AnyConnect Secure Mobility Client v4.x User Guide

Server Certificate Management

A server certificate received from the secure gateway during connection establishment automatically authenticates that server to
AnyConnect, if and only if it is valid and trusted. Otherwise:

• A valid, but untrusted server certificate is reviewed, authorized, and imported to the AnyConnect certificate store. Once a server

certificate is imported into the AnyConnect store, subsequent connections made to the server using this digital certificate are
automatically accepted.

• An invalid certificate cannot be imported into the AnyConnect store. It can only be accepted to complete the current connection.

This is not recommended.

Server certificates in the AnyConnect store can be deleted if they are no longer needed for authentication.

Import Certificates Attached to Emails

Before You Begin

Your administrator must email you a certificate to use for authentication.

Procedure

Step 1

Tap the icon for the attached certificate.
Apple iOS recognizes that you have just opened a certificate and opens an installation wizard.

Step 2

Tap Install.

Step 3

Follow the prompts in the installation wizard.

Step 4

If you are prompted, enter an authentication code for the certificate.

Step 5

Tap Next.
Apple iOS installs the certificate.

Import Certificates From Hyperlinks

Before You Begin

Ensure that External Control is set to either Prompt or Enable within the AnyConnect settings to allow this activity. See

Control

the External Use of AnyConnect, on page 15

for more information.

Your administrator must provide you with a hyperlink to the location of a certificate that you install on your iOS device.

Procedure

Step 1

Tap the hyperlink provided by your administrator.

Step 2

If you are prompted, provide the authentication code for the certificate and Tap Next.

Apple iOS imports the certificate and displays a certificate enrollment message.