Difference between revisions of "Azure/VPN"
From SETV Springfield Technical Wiki
m (→Generate Client Certificate) |
m |
||
Line 20: | Line 20: | ||
Find your Root Cert and copy the {Thumbprint} | Find your Root Cert and copy the {Thumbprint} | ||
$cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}" | $cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}" | ||
+ | |||
+ | Use the below code to create the Client certificate | ||
New-SelfSignedCertificate -Type Custom -KeySpec Signature ` | New-SelfSignedCertificate -Type Custom -KeySpec Signature ` | ||
Line 26: | Line 28: | ||
-CertStoreLocation "Cert:\CurrentUser\My" ` | -CertStoreLocation "Cert:\CurrentUser\My" ` | ||
-Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2") | -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2") | ||
+ | |||
+ | Next | ||
[[Category:Platinum Healthcare IT]] | [[Category:Platinum Healthcare IT]] |
Revision as of 07:44, 12 March 2017
Step-by-set on how to set up VPNs in Azure
Point-to-Site
For roaming and individual users, connect a machine to the Vnet using a certificated VPN Profile.
Create Self-Signed Root Certificate
You need to use PowerShell to create the certificates.
- Run PowerShell as Admin
- Run this command clanging "P25RootCert" to a a static name
$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature ` -Subject "CN=P2SRootCert" -KeyExportPolicy Exportable ` -HashAlgorithm sha256 -KeyLength 2048 ` -CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign
- Export the Key run
certmgr.msc
- Navigate to
'Certificates - Current User\Personal\Certificates'
, and right-click. Click All Tasks, and then click Export. - Export format as
Base-64 encoded X.509 (.CER)
Generate Client Certificate
Get-ChildItem -Path “Cert:\CurrentUser\My”
Find your Root Cert and copy the {Thumbprint}
$cert = Get-ChildItem -Path "Cert:\CurrentUser\My\{THUMBPRINT}"
Use the below code to create the Client certificate
New-SelfSignedCertificate -Type Custom -KeySpec Signature ` -Subject "CN=P2SChildCert" -KeyExportPolicy Exportable ` -HashAlgorithm sha256 -KeyLength 2048 ` -CertStoreLocation "Cert:\CurrentUser\My" ` -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")
Next