Forum Discussion
IPSEC IKEv2 VPN Client Digital Signature configuration
Hi, How can we configure Windows 11 Pro to avoid '4096-bit PKCS#1 1.5 RSA with SHA1' Digital Signature authentication for an 'IPSEC IKEv2 Certificate' VPN client on a Windows 11 (22H2) Profession...
I'm having the same difficulty now (2024)
Were you ever able to configure a Window client to use a more secure/acceptable signature algorithm?
Thanks!
Alas not yet, VPN connection is still refused by server since '4096-bit PKCS#1 1.5 RSA with SHA1' signature is no longer supported (RFRC 8247). I did not find any VPN connection parameter in Powershell to specify a signature algorithm to use.
Windows definition is :
Edition: Windows 11 Professional
Version : 23H2
Build: 22631.3593,
Experience: Windows Feature Experience Pack 1000.22700.1003.0
You are right, if I find any solution, I will let you know.
Best regards
Eric