[c-nsp] AnyConnect 3.x certificate auth prompts

[James Michael Keller]

All,

Is there a way to prevent AnyConnect from prompting users with local 
identify certificates (including CaC ones) from being prompted when we 
only have AAA selected for auth on the profile?

With the default automatic certificate selection, if they have one cert 
installed it tries to use that automatically and fails without prompting 
for username/passcode (rsa tokens).

With automatics selection installed they get prompted but can cancel 
from that window and get the login/passcode prompt as expected.

-- 

-James