Re: Certificates
From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 03/11/04
- Next message: Lanwench [MVP - Exchange]: "Re: Mail address to MS support!"
- Previous message: Bernd Schnabl: "L2TP/IPSec Computer Certificates for non domain computers"
- In reply to: Bernd: "Re: Certificates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 11 Mar 2004 01:36:09 GMT
You would use Web Enrollmnet to request a certificate as described in the
link below. For machine certificates to use for l2tp you need to enable
"offline ipsec" template in the CA Management Console. --- Steve
http://www.microsoft.com/windows2000/techinfo/planning/security/cawebsteps.asp
"Bernd" <anonymous@discussions.microsoft.com> wrote in message
news:ad3101c40706$45261b60$a101280a@phx.gbl...
> Hi
> I also run a L2TP/IPSec VPN. Issuing of
> user and computer certificates is no problem with
> Windows 2003 Server as long as the client computers
> are member of the domain.
> But how do you issue a computer certificate to a
> computer which is outside of the domain ?
> Auto Enrollment Policies cannot be used.
> Any help is wellcomed.
> Bernd
>
> >-----Original Message-----
> >I was about to say the same thing... If you use VPN all
> will be good.. That
> >is what we setup for our company. we also use iPass for
> dialing in to the
> >inet. That's good for users that are abroad or on travel.
> >
> >John Flint
> >
> >
> >
> >"Pawan Agarwal (MSFT)" <pawana@online.microsoft.com>
> wrote in message
> >news:ujRsu2qBEHA.1604@TK2MSFTNGP11.phx.gbl...
> >> This is possible by using L2TP/IPSec for VPN.
> >> look at Microsoft L2TP/IPSec VPN Client
> >>
> >http://www.microsoft.com/windows2000/server/evaluation/new
> s/bulletins/l2tpcl
> >ient.asp
> >>
> >> -Pawan
> >> --
> >> --------------------------------------------------------
> -----------------
> >> "This posting is provided "AS IS" with no warranties,
> and confers no
> >> rights."
> >> --------------------------------------------------------
> ----------------
> >> "ANDC" <andc.it@btconnect.com> wrote in message
> >> news:uZCcsmqBEHA.2308@tk2msftngp13.phx.gbl...
> >> > Hi,
> >> >
> >> > Can this be done first?
> >> >
> >> > I wish to configure remote clients to only access
> network resources (at
> >> HQ)
> >> > if they have a certificate installed (I plan to use
> Windows 2003
> >> Enterprise
> >> > Server). If a client does not have a certificate and
> is trying to
> >connect
> >> > from a certain IP address range then they will not be
> able to access any
> >> > network resources.
> >> >
> >> > The reason I though of certifcates as encrypt all the
> data. The end
> >user
> >> > will be connected to a wireless network.
> >> >
> >> > Does this make sense?
> >> >
> >> > thanks
> >> >
> >> >
> >>
> >>
> >
> >
> >.
> >
- Next message: Lanwench [MVP - Exchange]: "Re: Mail address to MS support!"
- Previous message: Bernd Schnabl: "L2TP/IPSec Computer Certificates for non domain computers"
- In reply to: Bernd: "Re: Certificates"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
