Re: L2TP Problem

praraujo@xxxxxxxxx a écrit :
well ... the registry key is needed for sure if the L2TP VPN
connection goes throught a NAT.

Have you tried to get a new certificate to that particular machine ?

Note that depending on the certificate template used some certificates
don't allow being exported ..

If you got the certificate from another machine and if the certificate
is exportable make sure that during the export procedure you also
export the private key.

The certificate may appear ok on the machine store but without a
private key is useless.

Pedro A.


Jean-Pascal Laux escreveu:
praraujo@xxxxxxxxx a écrit :
That link explains the problem but this one gives you the directions
http://support.microsoft.com/kb/885407/

Pedro A.
prara...@xxxxxxxxx escreveu:
Something has changed in SP2 for Win XP ...

Take a look at this link http://support.microsoft.com/kb/885348/en-us

I had that problem and this solved it


Pedro A.

Jean-Pascal Laux escreveu:
We use ISA Server 2005 SP1 and VPN clients (L2TP/IPSec). This
configuration works fine except for one client running Windows XP SP2
(all others clients run fine).

This computer always reports that the certificate has no private key but
when I check in a MMC with certificats snap-in, I can see that the
certificate has a vlid private key.

I check on Internet with no success.

Any idea ?

Thanks

Jean-Pascal
I know this article. The strange fact is only one computer doesn't work.
If I remove the registry key, the error is not the same...

I already tried all these solutions. About 10 pcs work with no problem.

Jean-Pascal
.

Relevant Pages

  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: L2TP Problem
    ... Pedro A. ... Jean-Pascal Laux escreveu: ... certificate has a vlid private key. ...
    (microsoft.public.isa.vpn)
  • Re: Certificates, Keys, Mobile Users, Intended Usage
    ... Option that you think about uses self signed EFS certificates. ... Better then exporting user's private key as backup is to setup DRA (Data ... there is no EFS certificate and it will generate a new one. ... Mobile computer users benefit from encrypting sensitive ...
    (microsoft.public.win2000.security)
  • Re: PFXExportCertStoreEx
    ... which contains the actual PFX and write that to the disk. ... methods to export certificate + private key from the IE store. ...
    (microsoft.public.platformsdk.security)