install, upgrade, or downgrade a CSD image on the ASA

C

---

Use this procedure to install, upgrade, or downgrade a CSD image on the ASA:

---

Step 1 Download the latest version of CSD using Downloading the Latest Version of CSD.

If you are downgrading CSD, use the Downloading the Latest Version of CSD procedure but expand the Latest Releases folder in the directory tree and select the release you need.

Step 2 Start ASDM and choose Configuration > Remote Access VPN > Secure Desktop Manager > Setup. ASDM opens the Setup pane (Figure 2-1).

Figure 2-1 Setup

Step 3 Click Upload to prepare to transfer a copy of the CSD software from your local PC to the flash card installed in the ASA 5500.

ASDM opens the Upload Image dialog box.

Step 4 Click Browse Local Files to prepare to select the file on your local PC.

Step 5 Choose the csd_<n>.<n>.*.pkg you downloaded in Step 1 and click Select.

ASDM closes the Select File Path dialog box and displays the CSD package you just selected in the Flash File System Path field.

---

Note You do not need to uninstall an installed version of CSD before you upgrade or downgrade the version.

---

Step 6 Click Upload File.

---

Caution Avoid opening other windows until you complete the remaining steps.

---

ASDM transfers a copy of the file to the flash card. An Information dialog box displays the following message:

File has been uploaded to flash successfully.

Step 7 Click OK.

ASDM clears the fields in the Upload Image dialog box.

Step 8 After the Use Uploaded Image dialog box displays the following message, click OK.

Use disk0:/csd_<n>.<n>.*.pkg as your new current image?

Step 9 Check Enable Secure Desktop.

Step 10 Click Apply.

---

Note If AnyConnect Essentials is enabled on the ASA, you receive a message that CSD will not work with it. You have the choice to Disable or Keep AnyConnect Essentials.

---

Step 11 Click OK when you receive the message, "Secure Desktop image is successfully updated. The new features can be accessed after ASDM is restarted."

Step 12 Close the ASDM window.

A window displays the following message: The configuration has been modified. Do you want to save the running configuration to flash memory?

Step 13 Click Save.

ASDM saves the configuration and closes.

Step 14 Start a new ASDM session with the ASA to customize the Secure Desktop Manager configuration.

---

Enabling or Disabling CSD on the ASA

Enabling CSD loads the CSD configuration file, data.xml, from the flash device to the running configuration. If you transfer or replace the data.xml, disable and then enable CSD to load the file.

Disabling CSD does not alter the CSD configuration.

Use ASDM to enable or disable CSD as follows:

---

Step 1 Choose Configuration > Clientless SSL VPN > Secure Desktop > Setup.

ASDM opens the Setup pane (Figure 2-1).

---

Note The Secure Desktop Image field displays the image (and version) that is currently installed. The Enable Secure Desktop check box indicates whether CSD is enabled.

---

Step 2 Check or uncheck Enable Secure Desktop and click Apply.

ASDM enables or disables CSD.

Step 3 Click the X in the upper right corner of the ASDM window to exit.

A window displays the following message:

The configuration has been modified. Do you want to save the running configuration to 
flash memory?

Step 4 Click Save. ASDM saves the configuration and closes.

---

Entering an Activation Key to Support Advanced Endpoint Assessment

Advanced Endpoint Assessment includes all of the Endpoint Assessment features, and lets you configure an attempt to update noncompliant computers to meet version requirements. You can use ASDM to activate a key to support Advanced Endpoint Assessment after acquiring it from Cisco, as follows:

---

Step 1 Choose Configuration > Device Management > Licensing > Activation Key.

Step 2 Enter the key in the New Activation Key field.

Step 3 Click Update Activation Key.

Step 4 Choose File > Save Running Configuration to Flash.

An Advanced Endpoint Assessment entry appears and the Configure button becomes active in the HostScan Extensions area of the Configuration > Remote Access VPN > Secure Desktop Manager > HostScan pane, which is accessible only if CSD is enabled.

---

Uninstalling CSD from the ASA

Uninstalling CSD removes the CSD configuration file, data.xml, from the desktop directory on the flash card. If you want to retain the file, copy it using an alternative name or download it to your workstation before you uninstall CSD.

Uninstall CSD on the ASA as follows:

---

Step 1 Open ASDM and choose Configuration > Remote Access VPN > Secure Desktop Manager > Setup.

ASDM opens the Setup pane (Figure 2-1).

Step 2 Click Uninstall.

A confirmation window displays the following message:

Do you want to delete disk0:/csd_<n>.<n>.*.pkg and all CSD data files?

Step 3 Click Yes.

ASDM removes the text from the Location text box and removes the Secure Desktop Manager menu options below Setup.

Step 4 Click the X in the upper right corner of the ASDM window to exit.

A window displays the following message:

The configuration has been modified. Do you want to save the running configuration to 
flash memory?

Step 5 Click Save. ASDM saves the configuration and closes.