Smart Card Authentication Issues

[rdelridge]

We are using ActivClient with smart cards in a test environment and are having trouble authenticating via Secure Client. We need to have the subject alternative name passed instead of the subject name. Running NGX R60 enforcement modules, and R60 Build 34 thru 52 Secure Client.

We are able to do this with dial connections using Windows DUN with ActivClient.

Is there a way to set up so that SecureClient, or the VPN infrastructure will pick up the Subject Alt Name so the authenticated user is a number instead of a personal name or email address?

We can auth directly to the external CA as is if the VPN infrastructure is trusted, but would rather pass through Active Directory for audit and other reasons. We can do username/password to LDAP, but are matching the wrong field.

Any suggestions would be usefull.