Azure/VPN - Revision history

Setvadmin: /* Create Self-Signed Root Certificate[2] */

2017-03-12T07:54:31Z

‎Create Self-Signed Root Certificate[2]

Setvadmin: /* Point-to-Site */

2017-03-12T07:53:21Z

‎Point-to-Site

Setvadmin: /* Create Self-Signed Root Certificate */

2017-03-12T07:45:12Z

‎Create Self-Signed Root Certificate

Setvadmin at 07:44, 12 March 2017

2017-03-12T07:44:21Z

Setvadmin: /* Generate Client Certificate */

2017-03-12T07:43:27Z

‎Generate Client Certificate

Setvadmin: /* Point-to-Site */

2017-03-12T07:42:07Z

‎Point-to-Site

Setvadmin at 07:37, 12 March 2017

2017-03-12T07:37:48Z

Setvadmin: Created page with "Step-by-set on how to set up VPNs in Azure == Point-to-Site == For roaming and individual users, connect a machine to the Vnet using a certificated VPN Profile. === Create S..."

2017-03-12T07:36:11Z

Created page with "Step-by-set on how to set up VPNs in Azure == Point-to-Site == For roaming and individual users, connect a machine to the Vnet using a certificated VPN Profile. === Create S..."

New page

Step-by-set on how to set up VPNs in Azure

== Point-to-Site ==
For roaming and individual users, connect a machine to the Vnet using a certificated VPN Profile.

=== Create Self-Signed Root Certificate ===
You need to use [[PowerShell]] to create the certificates.
# Run PowerShell as Admin
# Run this command clanging "P25RootCert" to a a static name
$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-Subject "CN=P2SRootCert" -KeyExportPolicy Exportable ` -HashAlgorithm sha256 -KeyLength 2048 `
-CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign

[[Category:Platinum Healthcare IT]]

@@ Line 16: / Line 16: @@
 * Navigate to <code>'Certificates - Current User\Personal\Certificates'</code>, and right-click. Click All Tasks, and then click Export.
 * Export format as <code>Base-64 encoded X.509 (.CER)</code>
 === Generate Client Certificate ===
@@ Line 50: / Line 51: @@
 Attempt to connect and test.
 [[Category:Platinum Healthcare IT]]

@@ Line 1: / Line 1: @@
-Step-by-set on how to set up VPNs in Azure
+Step-by-set on how to set up VPNs in Azure <ref>https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-point-to-site-create</ref>
 == Point-to-Site ==
 For roaming and individual users, connect a machine to the Vnet using a certificated VPN Profile.
-=== Create Self-Signed Root Certificate ===
+=== Create Self-Signed Root Certificate<ref>https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site</ref> ===
 You need to use [[PowerShell]] to create the certificates.
 * Run PowerShell as Admin
@@ Line 30: / Line 30: @@
      -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")
-Next
+=== Export Client Certificate ===
 [[Category:Platinum Healthcare IT]]

@@ Line 20: / Line 20: @@
 Find your Root Cert and copy the {Thumbprint}
      $cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}"
      New-SelfSignedCertificate -Type Custom -KeySpec Signature `
@@ Line 26: / Line 28: @@
      -CertStoreLocation "Cert:\CurrentUser\My" `
      -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")
 [[Category:Platinum Healthcare IT]]

@@ Line 17: / Line 17: @@
 === Generate Client Certificate ===
-  <code>Get-ChildItem -Path “Cert:\CurrentUser\My”</code>
+    Get-ChildItem -Path “Cert:\CurrentUser\My”
 Find your Root Cert and copy the {Thumbprint}
-<code>$cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}"</code>
+    $cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}"
-<code>New-SelfSignedCertificate -Type Custom -KeySpec Signature `
+    New-SelfSignedCertificate -Type Custom -KeySpec Signature `
--Subject "CN=P2SChildCert" -KeyExportPolicy Exportable `
+    -Subject "CN=P2SChildCert" -KeyExportPolicy Exportable `
--HashAlgorithm sha256 -KeyLength 2048 `
+    -HashAlgorithm sha256 -KeyLength 2048 `
--CertStoreLocation "Cert:\CurrentUser\My" `
+    -CertStoreLocation "Cert:\CurrentUser\My" `
--Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")</code>
+    -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")
 [[Category:Platinum Healthcare IT]]

← Older revision		Revision as of 07:37, 12 March 2017
Line 12:		Line 12:
	-CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign		-CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign

−	[[Category:Platinum Healthcare IT]]	+	# Export the Key run certmgr.msc
		+	# Navigate to 'Certificates - Current User\Personal\Certificates', and right-click. Click All Tasks, and then click Export.
		+
		+	[[Category:Platinum Healthcare IT]]

@@ Line 9: / Line 9: @@
 * Run this command clanging "P25RootCert" to a a static name
      $cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature `
-     -Subject "CN=P2SRootCert" -KeyExportPolicy Exportable `  -HashAlgorithm sha256 -KeyLength 2048 `
+     -Subject "CN=P2SRootCert" -KeyExportPolicy Exportable `
-   -CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign
+    -HashAlgorithm sha256 -KeyLength 2048 `
 * Export the Key run <code>certmgr.msc</code>