AnyConnect Secure Mobility Client Useful Tips for macOS

You can fix the most commonly encountered issues with Cisco AnyConnect Secure Mobility Client connections by altering your browser settings. If you are having problems, please see the following notes:

In these notes the term "Security Gateway" refers to the Cisco device to which the Cisco AnyConnect Secure Mobility Client connects. Examples of Security Gateways include the Adaptive Security Appliance 5500 and Catalyst 6000.

The complete release notes for this product cover additional issues and are available from Cisco's website.

Adding a Security Certificate in Response to Browser Alert Windows

SSL uses certificates to identify peers in a connection. The Security Gateway has a certificate installed that is used to establish its identity. The certificate may be issued from a widely trusted source, such as Verisign or Thawte, that your computer is already configured to trust. Or it may be issued from a self-signed certificate that your computer does not trust automatically, resulting in security warnings during connection establishment.

This section explains how to install a self-signed certificate as a trusted root certificate on a client in response to the browser alert windows.

In Response to Firefox "Certified by an Unknown Authority" Window

Install the certificate as a trusted root certificate as follows:

  1. Click Examine Certificate in the "Web Site Certified by an Unknown Authority" window.
    The Certificate Viewer window opens.
  2. Click the Accept this certificate permanently option.
  3. Click OK.
    The Security Gateway window opens, signifying the certificate is trusted.

In Response to "Safari can't verify the identity of the website Hostname_or_IP_address" Window

Install the certificate as a trusted root certificate as follows:

  1. Click Show Certificate in the "Safari can't verify the identity of the website Hostname_or_IP_address" window.
  2. Select the option "Always trust Hostname_or_IP_address when connecting to Hostname_or_IP_address."
  3. Click Continue.
    The Security Gateway window opens, signifying the certificate is trusted.


Allowing Java Applet Execution in Safari

Any browser that supports the Java plugin should work for Cisco AnyConnect Secure Mobility Client’s web launch. On macOS, the Java plugin is 64-bit only; this means that only 64-bit browsers are supported. Safari and Firefox both support the Java plugin; however, Chrome is a 32-bit only browser and does not run Java. For this reason, Cisco AnyConnect Secure Mobility Client’s web launch functionality will not run in Chrome on macOS and will need to be downloaded manually.


Safari 9 (and earlier)


By default, Safari blocks execution of Java applets. In order to grant the necessary permissions to web sites running Cisco AnyConnect Secure Mobility Client’s web launch., we must edit Safari's security preferences.

  1. Open Safari Preferences.
  2. Select Security preference.
  3. Click Manage Website Settings... button.
  4. Select Java from the options listed on left side.
  5. Change the option from Block to Allow Always for the website "Hostname_or_IP_address" you are trying to connect to.
  6. Finally, click Done.

This will allow Cisco AnyConnect Secure Mobility Client Java applet to execute. Retry the VPN connection.


Safari 10 (and later)


Starting with Safari 10, tho option to toggle “ are mode” still exists, but it is hidden. Follow these steps to enable Cisco AnyConnect Secure Mobility Client's Java applet execution.

  1. Open Safari Preferences.
  2. Select Security preference.
  3. Check the Internet plug-ins: option to allow Plug-ins.
  4. Select Plug-in Settings button.
  5. Select Java from the options listed on left side.
  6. Highlight the "Hostname_or_IP_address" you are trying to connect to.
  7. Hold Alt(or Option) and click the drop down menu. Make sure that On is checked, and Run in Safe Mode is unchecked.
  8. Finally, click Done.

This will allow Cisco AnyConnect Secure Mobility Client Java applet to execute. Retry the VPN connection.