Install Computer and User Certificates for EAP-TLS

  • Article

Updated: April 30, 2010

Applies To: Windows Server 2008, Windows Server 2008 R2

When you use Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) as the user authentication method for your site-to-site connection, you must install a computer certificate on the authentication server of the answering router and a user certificate on the calling router. These steps are the same for a dial-up router and for a VPN router.

For information about how to deploy certificates required by EAP-TLS, see Deploying Certificate-Based Authentication for Demand-Dial Routing.