Issuance of ipsec Certificate in windows server

Because to do the IPsec certificate authentication communication experiment, you need to get the issued certificate, so you have to sign it yourself.

What I use here is the windows server 2016 desktop experience version. When you install it, you must choose the desktop version, otherwise the progress will be cmd.

1 add a functional role

2 function

3 installation

In the pop-up certificate box, fill in the certificate information and select web enrollment

That's it! it's ready!

Check to see if IIS has a default CertSrv directory, which can be used to apply for a certificate using a web link from another machine.

Apply for an advanced certificate, ipsec

Open the certification authority

Issue a certificate

Export certificate

Import IPsec certificate in the testing machine, and add certificate to mmc

Save as binary file cer