I am having trouble and need some direction using computer certificates with Windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work correctly using a passphrase for user authentication. However, I would like to use certificates.
I cannot find any documentation on the requirements to make certificates for IPSEC user authentication.
I have been using
makecert to create the third party CA then made some certificates using the following ekus:
Server Authentication EKU is 22.214.171.124.126.96.36.199.1 IP security IKE intermediate EKU is 188.8.131.52.184.108.40.206.2 Client Certificate EKU is 220.127.116.11.18.104.22.168.2
Does anyone know of a good resource or documentation for Windows 7 firewall that includes this message? Or has anyone created these kind of certificates before and would be willing to assist me?