IPsec WIth Certificate
helloi want to use ipsec with certicate, and i want toknowhow to issue the certificate to use in IPsec Policy Managmentthanks
July 4th, 2009 7:08pm
The best way, by far, is to use a Windows Server based Certificate Server. Combining that with Group Policy in an Active Directory domain makes it almost automatic. You can configure all of your domain members to autoenroll and receive the proper certificate for IPsec usage. For more information about Active Directory Certificate Services, see http://technet.microsoft.com/en-us/library/cc770357(WS.10).aspx.Dave Bishop
Senior Technical Writer
Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 4th, 2009 9:10pm
but if the computers not in domain, and i still need that computers "talks" between them in ipsec with certificate.
July 4th, 2009 9:53pm
That would require a forest. This is a level higher and so is the security; you will have to set additional settings.http://technet.microsoft.com/en-us/library/cc268205.aspx
Look for the term in Help you will find a "How To" soon.Funky Cold Medina.
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 11:31am
sorry. but i dont understand how its help methanks
July 5th, 2009 8:39pm
So you don't have Active Directory at all? Then unless you have some other third-party management system, you'll have to manually install the certificates on the client and server computers. You could still use a Windows Server 2008Certificate Server to create them, it's just that if you're not in an AD environment, then you'll need to find some other automated way to deploy them, or do it manually.Dave Bishop
Senior Technical Writer
Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 10:12pm
ok, but howi do it manually this is my problem
July 5th, 2009 10:15pm
Aha. In Windows, launch MMC.exe, and add the Certificates snap-in for the Local Computer account. You can use the Import function to store certs into the "Personal" store. Expand "Personal", then right-click "Certificates", click "Import", and follow the steps in the Wizard.Dave Bishop
Senior Technical Writer
Windows Server Networking User Assistance
Free Windows Admin Tool Kit Click here and download it now
July 5th, 2009 11:48pm
Hi,
You can also refer to:
How to install a certificate for use with IP Security in Windows Server 2003
http://support.microsoft.com/kb/323342
Or the Using Certificate Authentication section in the following article for more detailed steps:
Step-by-Step Guide to Internet Protocol Security (IPSec)
http://technet.microsoft.com/en-us/library/bb742429.aspx#EEAA
July 7th, 2009 12:49pm


