IPsec WIth Certificate
helloi want to use ipsec with certicate, and i want toknowhow to issue the certificate to use in IPsec Policy Managmentthanks
July 4th, 2009 7:08pm

The best way, by far, is to use a Windows Server based Certificate Server. Combining that with Group Policy in an Active Directory domain makes it almost automatic. You can configure all of your domain members to autoenroll and receive the proper certificate for IPsec usage. For more information about Active Directory Certificate Services, see http://technet.microsoft.com/en-us/library/cc770357(WS.10).aspx.Dave Bishop Senior Technical Writer Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 4th, 2009 9:10pm

but if the computers not in domain, and i still need that computers "talks" between them in ipsec with certificate.
July 4th, 2009 9:53pm

That would require a forest. This is a level higher and so is the security; you will have to set additional settings.http://technet.microsoft.com/en-us/library/cc268205.aspx Look for the term in Help you will find a "How To" soon.Funky Cold Medina.
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 11:31am

sorry. but i dont understand how its help methanks
July 5th, 2009 8:39pm

So you don't have Active Directory at all? Then unless you have some other third-party management system, you'll have to manually install the certificates on the client and server computers. You could still use a Windows Server 2008Certificate Server to create them, it's just that if you're not in an AD environment, then you'll need to find some other automated way to deploy them, or do it manually.Dave Bishop Senior Technical Writer Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 10:12pm

ok, but howi do it manually this is my problem
July 5th, 2009 10:15pm

Aha. In Windows, launch MMC.exe, and add the Certificates snap-in for the Local Computer account. You can use the Import function to store certs into the "Personal" store. Expand "Personal", then right-click "Certificates", click "Import", and follow the steps in the Wizard.Dave Bishop Senior Technical Writer Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 11:48pm

Hi, You can also refer to: How to install a certificate for use with IP Security in Windows Server 2003 http://support.microsoft.com/kb/323342 Or the Using Certificate Authentication section in the following article for more detailed steps: Step-by-Step Guide to Internet Protocol Security (IPSec) http://technet.microsoft.com/en-us/library/bb742429.aspx#EEAA
July 7th, 2009 12:49pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics