Adding A Security Certificate In Response To Browser Security Alert Windows - Cisco 5505 - ASA Firewall Edition Bundle Administrator's Manual

Before You Install the AnyConnect Client
Adding a security appliance to the list of trusted sites for Internet Explorer is required for those running
Note
Windows Vista who want to use WebLaunch.
Go to Tools > Internet Options > Trusted Sites.
Step 1
The Internet Options window opens.
Click the Security tab.
Step 2
Click the Trusted Sites icon.
Step 3
Click Sites.
Step 4
The Trusted Sites window opens.
Type the host name or IP address of the security appliance. Use a wildcard such as
Step 5
https://*.yourcompany.com to allow all ASA 5500s within the yourcompany.com domain to be used to
support multiple sites.
Click Add.
Step 6
Click OK.
Step 7
The Trusted Sites window closes.
Click OK in the Internet Options window.
Step 8
Note To use Microsoft Active Directory to add the security appliance to the list of Internet Explorer trusted
sites for domain users, see
of Internet Explorer Trusted Sites for Domain Users, page
When a user gets the server certificate for the security appliance from a globally trusted certificate
authority—for example, Verisign or Cisco—the user never sees a Security Alert pop-up when connecting
to that security appliance.

Adding a Security Certificate in Response to Browser Security Alert Windows

This section explains how to install a self-signed certificate as a trusted root certificate on a client in
response to the browser alert windows.
Connecting to this security appliance.
A remote user using standalone mode might see a Security Alert dialog box in several possible login
situations. The following examples and scenarios show some instances. After these descriptions, you'll
see how to add a security certificate to avoid these situations.
The following examples illustrate sequences of events involving the pop-up Security Alert dialog box.
Example Set 1
1.
2.
Cisco AnyConnect VPN Client Administrator Guide
2-4
Using Microsoft Active Directory to Add the Security Appliance to the List
A user connects to badly configured security appliance #1. As a result, the user sees the pop-up
Security Alert dialog box.
The user approves the certificate.
Chapter 2 Common AnyConnect VPN Client Installation and Configuration Procedures
B-1.
OL-12950-012