hi friends i want to deploy ipsec between 2 win 2008 R2 domain joined servers and select certificate as authentication method. in enterprise CA certificates template node, we see 3 ipsec related certificate : computer cert - ipsec - ipsec ( offline request ) i have heared that we should use computer certificate for this task. so what are those 2 other certificates ? ( ipsec and ipsec ( request offline ) thanks

Hello, for security you might better ask in http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Hi, The only difference between IPSEC and IPSEC(Offline) templates is that: IPSEC(offline Request) certificate template allows the certificate requestor to provide the subject name inofrmation in the certificate request.This allows VPN users to provide the DNS name of their home computer in the certificate request. For more information about Certificate template refer to: http://msdn.microsoft.com/en-us/library/bb720757.aspx Regards, Gargi

thanks to all repliers

thanks to all repliers