Hi, I am using Windows 2008 r2 enterprise for my issuing certificate server. I have set this up, and have just issued the ocsp certificate, no others (apart form the issuing certificate) What I need to do is have the client authenticate with the cisco asa 5520, and once it has succeeded (using ipsec not ssl), will then use a rsa fob to authenticate user to the rsa server. Has anyone else done something similar that they could give me a step by step? I guess I can issued a workstation certificate using autoenrollment, which will the appear on clients cisco vpn certificate store (or do I need to request this from the cisco vpn client and then image the W7 image?) Also which certificate would I need to give the asa 5520, would this be a client certificate?, and is the best way just to manually import the certificate onto the hardware device? This has probably been done lots of times in the past, so a step by step would be really useful. Thanks Jaz

Hi, Thanks for your post. However, it appears that the issue is more Cisco device related. I would recommend that you contact Cisco support team for further support. In addition, Id like to share some articles about deployment Cisco ASA VPN with RSA token. Hope it helps. RSA SecurID Ready Implementation Guide http://www.rsa.com/rsasecured/guides/imp_pdfs/Cisco_ASA_AuthMan7.1.pdf Cisco ASA VPN and RSA SecurID Appliance http://rivald.blogspot.com/2009/09/cisco-asa-vpn-and-rsa-secureid.html Using the Common Access Card for Remote Access VPN with the ASA 5500 http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_implementation_design_guide0900aecd805fc1d0.html Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. Best Regards, Aiden TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here. Aiden Cao TechNet Community Support

Hi, How are things going? I just want to check if the information provided was helpful. If there is any update or concern, please feel free to let us know. Best Regards, Aiden TechNet Subscriber Support If you are TechNet Subscription user and have any feedback on our support quality, please send your feedback here.Aiden Cao TechNet Community Support