Linux: Fix AnyConnect VPN Server Certificate Errors

Some versions of Linux do not come with a Certificate Authority (CA) certificate that will recognize the University of Minnesota's certificate CA. You will need to download and install an intermediate CA certificate.

Fixing AnyConnect VPN Server Certificate Errors

  1. Download the certificate setup tarball (tar).
  2. Open Terminal.
  3. Change directories in Terminal to the location of your certificate setup tarball.
  4. Type tar zxvfo setup-certs.tar.gz
  5. Press Enter or Return. This will extract three files: README, setup-certs.sh and incommon_root_ca.pem.
  6. Type sudo sh ./setup-certs.sh
  7. Press Enter or Return. This will execute the setup-certs.sh script. The script will make a directory and install the incommon_root_ca.pem certificate file.

If you have any questions contact Technology Help.