Downloads and Guides: Install AnyConnect VPN for Linux
Follow these steps to install the Cisco AnyConnect VPN client for Linux.
Java is a pre-requisite and must be installed prior to the AnyConnect installation.
- Once you have downloaded the AnyConnect VPN tarball, double-click to extract the folder named anyconnect-3.1.02026.
- Alternatively, if you prefer to use the command line, you can extract the anyconnect-3.1.02026 folder into your current location with the command:
- For 32-bit clients: tar xvfz anyconnect-linux-3.1.02026-k9.tar.gz
- For 64-bit clients: tar xvfz anyconnect-linux_64x.0217-k9.tar.gz
- Once the anyconnect-3.1.02026 folder has been extracted, double-click to open it.
- There will be three directories, for three separate packages. We will be installing two: the vpn package and the dart (Diagnostic And Reporting Tool) package. Thevpn package must be installed first, followed by the dart.
- Click the folder vpn.
- Right-click the vpn_install.sh file.
- Double-click Run.
- Use the GUI App to install the Cisco AnyConnect VPN client at the root level. For some versions of Linux, such as Ubuntu, a command line will be required. Open a terminal window, navagate to the vpn folder via the path above and run the vpn_install.sh script as root.
- Example: sudo .⁄vpn_install.sh
- Click the folder dart.
- Right-click the dart_install.sh file.
- Double-click Run.
- Use the GUI App to install the Cisco AnyConnect Diagnostic and Reporting Tool.
- Again, for Ubuntu, a command line will be required. Open a terminal window, navigate across to the dart folder and run the dart_install.sh script as root.
- Example: cd ..⁄dart ; sudo .⁄dart_install.sh
- When you run the client for the first time, it is possible that you'll get a certificate error under some Linux distribution, such as Ubuntu and anything based on debian. When this happens, you'll need to manually install an intermediate certificate. The instructions to do this follow.
- Download the tarball for the certificates.
- Change to the Downloads directory.
- Using the command tar zxvfo setup-certs.tar.gz, extract the following three files: README, setup-certs.sh and incommon_root_ca.pem.
- Run the command sudo sh .⁄setup-certs.sh to execute the script. The script will make a directory and install the incommon_root_ca.pem file.
At this point, you should no longer receive the certificate error when signing into the client. If further assistance is needed, please contact Technology Help.
If a host name is needed, please use tc-vpn-1.vpn.umn.edu.