Forum Discussion

N V's avatar
N V
Copper Contributor
Jun 25, 2017
Solved

Azure Point To Site VPN certificate

Hello,

 

We currently obtained a SSL certificate from Symantec.


Can i use the certificate for authentication in my VPN? (can i upload the .cer file to Azure and export the certificate as .pfx and distribute it to authorized clients ? )

azure
Networking
virtual network
  • Kent Gaardmand's avatar
    Kent Gaardmand
    Jun 26, 2017

    you recived your public and private seperatly, none of them are the root certificate.

    The root would be the top level certificate, you can open it, export and then upload.

    But you cannot use the exported file to create new certificates, so all you clients would need to use the same PFX from you SSL, i would STRONGLY suggest you consider using another certificate for client access. Also i am unaware if all the clients can use the same PFX to identify them selves with.

4 Replies

Sort By
  • Kent Gaardmand's avatar
    Kent Gaardmand
    Steel Contributor
    Jun 25, 2017

    You need to create new certficates for each client based off the root certificate.

    look here

     

    If you purchased a Root certficate for your own PKI infrastructure, then yes you can use it.

    As it is just an SSL certficate then no, but you can create your own look here

     

     

    • N V's avatar
      N V
      Copper Contributor
      Jun 26, 2017

      Hello Kent,

       

      Thanks for your reply.

       

      When we ordered the certificate from Symantec, we got a .p7b file.  When we installed the file, 2 certificates appeared in the personal certificate store (one issued to our domain and one issued to Symantec by Verisign).

       

      Which one is my Root Certificate

      • Kent Gaardmand's avatar
        Kent Gaardmand
        Steel Contributor
        Jun 26, 2017

        you recived your public and private seperatly, none of them are the root certificate.

        The root would be the top level certificate, you can open it, export and then upload.

        But you cannot use the exported file to create new certificates, so all you clients would need to use the same PFX from you SSL, i would STRONGLY suggest you consider using another certificate for client access. Also i am unaware if all the clients can use the same PFX to identify them selves with.

Resources