I am having trouble and need some direction using computer certificates with Windows 7 firewall IP Security rules, using certificates only for user authentication. I can get everything to work correctly using a passphrase for user authentication. However, I would like to use certificates.
I cannot find any documentation on the requirements to make certificates for IPSEC user authentication.
I have been using makecert
to create the third party CA then made some certificates using the following ekus:
Server Authentication EKU is 1.3.6.1.5.5.7.3.1
IP security IKE intermediate EKU is 1.3.6.1.5.5.8.2.2
Client Certificate EKU is 1.3.6.1.5.5.7.3.2
Does anyone know of a good resource or documentation for Windows 7 firewall that includes this message? Or has anyone created these kind of certificates before and would be willing to assist me?