Hi Ziad, Have you tried the iPhone Configuration Utility? Im have not tried to add certificate on a iPhone, but used it to create a dot1x profile for OS X Mt Lion.
Windows - http://support.apple.com/kb/dl1466 Mac - http://support.apple.com/kb/dl1465 // Micke On 4 apr 2013, at 23:26, ziad kassab <[email protected]<mailto:[email protected]>> wrote: Dear Pieter, Actually i am using the built-in Ipsec client, no i didnt import the root certificate . i am trying very hard to find any document that shows how to do this. and i cant find any useful one. No clear documentation about this feature. i have imported the certificate .pfx from the CA Server directly to the phone and while create the certficate, i have added the attribute san:dns=192.168.1.254 where this is the Ip of the outside interface. Please if you have any hints or clue on how to do it, i appreciate it. On Fri, Apr 5, 2013 at 12:19 AM, Pieter-Jan Nefkens <[email protected]<mailto:[email protected]>> wrote: Hello Ziad, Have you added the root CA certificate to your iphone in a profile? Are you using anyconnect ipsec or the iOS built-in VPN client? If the first, you would have to import the root CA certificate into the anyconnect app as well PJ On 4 apr. 2013, at 18:34, ziad kassab <[email protected]<mailto:[email protected]>> wrote: Dears, i m trying to do Remote access VPN (IPSec) on ASA with CA Server on my iphone. it is not working and i am getting the error message could not validate server certificate. Anyone faced this issue before? is there any attribute that should be added? Thanks in advance. _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com<http://www.ipexpert.com/> Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com<http://www.platinumplacement.com/> --- Nefkens Advies Postbus 721 4200 AS Gorinchem Tel: +31 183 722 095<tel:%2B31%20183%20722%20095> GSM: +31 643057746<tel:%2B31%20643057746> Email: [email protected]<mailto:[email protected]> Jabber: [email protected]<mailto:[email protected]> Web: http://www.nefkensadvies.nl/ *** Nefkens Advies steunt Alpe d'huzes. Steunt u ons ook? *** http://deelnemers.opgevenisgeenoptie.nl/teams/nefkens-advies/ _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com<http://www.ipexpert.com> Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com<http://www.PlatinumPlacement.com>
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
