@kericson One of these articles may help
https://help.duo.com/s/article/4791?language=en_US
https://mostlikelee.com/blog-1/2017/9/16/cisco-anyconnect-certificate-auth-and-admin-prompts
@patgmac I agree, it should be able to read the cert in the system
keychain, but for some reason it's not. I do have "Allow Access to All
Apps" checked in the payload and it's still having this issue. We have
one ticket open with Cisco and are going ...
I'm running into a similar issue with the SCEP cert payload. The client
downloads the cert and places it in the System keychain and when Cisco
Anyconnect tries to access it it prompts for admin credentials.