Install Computer and User Certificates for EAP-TLS
Published: April 30, 2010
Updated: April 30, 2010
Applies To: Windows Server 2008, Windows Server 2008 R2
When you use Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) as the user authentication method for your site-to-site connection, you must install a computer certificate on the authentication server of the answering router and a user certificate on the calling router. These steps are the same for a dial-up router and for a VPN router.
For information about how to deploy certificates required by EAP-TLS, see Deploying Certificate-Based Authentication for Demand-Dial Routing.