help.computerisms.ca - User contributions [en-ca]

VPN Clients Using Certificates

2024-01-02T20:53:48Z

Mohit: /* Using IKEv2 on Windows 10/11 */

BEFORE YOU BEGIN: you need the following items: 
*A P12 Certificate with a password
*If your company firewall uses L2TP or IKEv2
*The Hostname or IP Address of your company firewall
**Note: if using IKEv2 you will be required to know and use the DNS name of your company firewall
*If you are using L2TP, you need a username/password combination

*NOTE:Actions Listed in {Curly Braces} may *not* be present, depending on the existing configuration of your computer

==Installing the Certificate - Windows 7/8/10==

#Press Windows Key+R to open a run window=>Enter mmc in the only available field=>click OK
#In the window the opens, click file=>Add/Remove Snapin
#Double-Click Certificates=>Select Computer Account and click Next=>Select Local Computer and click Finish=>Click OK
#In the left pane, expand Certificates=>right click Personal=>Select All tasks=>Click Import
#Click Next=>Click Browse=>navigate to the location of your P12 file
#At the bottom right of the window, use the drop down menu to select Personal Information Exchange=>Double click your P12 file
#Click Next=>Enter your Certificate Password=>click Next=>Select "Automatically Select ..."=>Click Next=>Click Finish
#Close this window=>Select No when prompted to save

==Setup L2TP on Windows 7/8/10==
*NOTE: For windows 8/10, the settings are the same, but they aren't all in the same place. Please contact Computerisms for assistance.

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the hostname or IP address of your company firewall provided to you by your company
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting to (IE put anything that identifies to you personally what you are connecting to)
##If you are unsure what to put in this field, use your Company's Name
#Select "Don't connect now, just set it up so I can connect later"
#Click Next=>Enter the L2TP Username provided to you=>Enter the L2TP Password provided to you
#In the lower-right corner of your screen by the clock, click the network icon
#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
#Set "Type of VPN" to "Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)"
#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK
#Set "Data encryption" to "Optional encryption (connect even if no encryption)"
#Under "Authentication", ensure "Allow these protocols" is selected=>Ensure "Unencrypted Password (PAP)" is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected
##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected
#Click OK
#In the lower-right corner of your screen by the clock, click the network icon=>Select the same connection=>Click Connect=>{Click Connect}
##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect

==Using IKEv2 on Windows 7(Legacy)==

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the DNS hostname of your company firewall provided to you by your company
##Note that using the IP address of the firewall will probably fail.
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
##If you are unsure what to put in this field, use your Company's Name
#Select "Don't connect now, just set it up so I can connect later"
#Click Next=>Leave all Fields Blank and Click Create=>Click Close
#In the lower-right corner of your screen by the clock, click the network icon
#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
##If you don't have a properties button, in the control panel under Network and Sharing Center, on the left side will be a "Manage Network Connections" link. In there, you will find your VPN connection. Right-click that, choose properties, and select the "Security" tab.
#Set "type of VPN" to IKEv2
#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK
#Set Data Encryption to Require Encryption
#Select the radio button for "Use Machine Certificates"
#Click OK

==Using IKEv2 on Windows 10/11==

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the DNS hostname of your company firewall provided to you by your company
##Note that using the IP address of the firewall will probably fail.
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
##If you are unsure what to put in this field, use your Company's Name
#Leave all fields default and Click Create
#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Change adapter settings"
##Right click on the VPN connection you created in step 4 =>Goto Properties
##Under Security change type of VPN to "IKEV2", Data encryption to "Require Encryption" and Authentication to "Use Machine Certificates"
#Your VPN connection is ready. Connect to VPN by going to the right bottom corner and click the network icon labeled "Destination Name" above and click "Connect"

==Using a Mac==
*Mac setups require the use of a mobile.config, please request assistance from us for help in getting this setup working.

VPN Clients Using Certificates

2024-01-02T20:44:59Z

Mohit: /* Using IKEv2 on Windows 10 */

BEFORE YOU BEGIN: you need the following items: 
*A P12 Certificate with a password
*If your company firewall uses L2TP or IKEv2
*The Hostname or IP Address of your company firewall
**Note: if using IKEv2 you will be required to know and use the DNS name of your company firewall
*If you are using L2TP, you need a username/password combination

*NOTE:Actions Listed in {Curly Braces} may *not* be present, depending on the existing configuration of your computer

==Installing the Certificate - Windows 7/8/10==

#Press Windows Key+R to open a run window=>Enter mmc in the only available field=>click OK
#In the window the opens, click file=>Add/Remove Snapin
#Double-Click Certificates=>Select Computer Account and click Next=>Select Local Computer and click Finish=>Click OK
#In the left pane, expand Certificates=>right click Personal=>Select All tasks=>Click Import
#Click Next=>Click Browse=>navigate to the location of your P12 file
#At the bottom right of the window, use the drop down menu to select Personal Information Exchange=>Double click your P12 file
#Click Next=>Enter your Certificate Password=>click Next=>Select "Automatically Select ..."=>Click Next=>Click Finish
#Close this window=>Select No when prompted to save

==Setup L2TP on Windows 7/8/10==
*NOTE: For windows 8/10, the settings are the same, but they aren't all in the same place. Please contact Computerisms for assistance.

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the hostname or IP address of your company firewall provided to you by your company
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting to (IE put anything that identifies to you personally what you are connecting to)
##If you are unsure what to put in this field, use your Company's Name
#Select "Don't connect now, just set it up so I can connect later"
#Click Next=>Enter the L2TP Username provided to you=>Enter the L2TP Password provided to you
#In the lower-right corner of your screen by the clock, click the network icon
#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
#Set "Type of VPN" to "Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)"
#Click the button called "Advanced"=>Deselect "Verify the Name and Usage attributes for the server's certificate"=>Click OK
#Set "Data encryption" to "Optional encryption (connect even if no encryption)"
#Under "Authentication", ensure "Allow these protocols" is selected=>Ensure "Unencrypted Password (PAP)" is deselected=>Ensure "Challenge Handshake Authentication Protocol (CHAP)" is selected
##"Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected
#Click OK
#In the lower-right corner of your screen by the clock, click the network icon=>Select the same connection=>Click Connect=>{Click Connect}
##A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect

==Using IKEv2 on Windows 7(Legacy)==

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the DNS hostname of your company firewall provided to you by your company
##Note that using the IP address of the firewall will probably fail.
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
##If you are unsure what to put in this field, use your Company's Name
#Select "Don't connect now, just set it up so I can connect later"
#Click Next=>Leave all Fields Blank and Click Create=>Click Close
#In the lower-right corner of your screen by the clock, click the network icon
#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
##If you don't have a properties button, in the control panel under Network and Sharing Center, on the left side will be a "Manage Network Connections" link. In there, you will find your VPN connection. Right-click that, choose properties, and select the "Security" tab.
#Set "type of VPN" to IKEv2
#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK
#Set Data Encryption to Require Encryption
#Select the radio button for "Use Machine Certificates"
#Click OK

==Using IKEv2 on Windows 10/11==

#Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
#Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
#In the "Internet Address" field, enter the DNS hostname of your company firewall provided to you by your company
##Note that using the IP address of the firewall will probably fail.
#The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
##If you are unsure what to put in this field, use your Company's Name
#Select "Don't connect now, just set it up so I can connect later"
#Click Next=>Leave all Fields Blank and Click Create=>Click Close
#In the lower-right corner of your screen by the clock, click the network icon
#The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
##If you don't have a properties button, in the control panel under Network and Sharing Center, on the left side will be a "Manage Network Connections" link. In there, you will find your VPN connection. Right-click that, choose properties, and select the "Security" tab.
#Set "type of VPN" to IKEv2
#Click Advanced Settings=>ensure Mobility is checked and Network outage time is set to 30 minutes=>click OK
#Set Data Encryption to Require Encryption
#Select the radio button for "Use Machine Certificates"
#Click OK

==Using a Mac==
*Mac setups require the use of a mobile.config, please request assistance from us for help in getting this setup working.

Email

2021-06-03T16:53:41Z

Mohit: /* Email Settings */

==Instructions For Configuring Email Clients==
{| style="width: 100%; border-spacing:15px;border-collapse:separate;border: 1px solid rgb(191, 238, 255); background-color: rgb(255, 235, 205);text-align:center;font-size:1.5em;"
|- valign="center"
| [[file:thunderbird_logo.png|link=https://help.computerisms.ca/Thunderbird|75px]]
|| [[file:Outlook.png|link=https://help.computerisms.ca/Outlook|75px]]
||
|-
| [[Thunderbird|Thunderbird]]
|| [[Outlook|Outlook]]
||
|}

==How to setup your email on iPhone==
{| style="width:100%" border="0" cellspacing="75" cellpadding="20" style="font-size:120%;
|-
|style="width: 50%"|
*Navigate to your settings and select the Mail, Contacts, Calenders settings
|[[File:Iphoneemail1.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail2.JPG|centre|450x450px]]
|
*Select Add Account
|-
|
*Select "Other" to add a POP3 or IMAP account
|[[File:Iphoneemail3.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail4.JPG|centre|450x450px]]
|
*Choose Add Mail Account
|-
|
*Enter your Name, Email, Password and a Description
*Click Next
|[[File:Iphoneemail5.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail6.JPG|centre|450x450px]]
|
*For Incoming mail server
**Host name: mail.domain.tld (for example mail.ctfn.ca)
**User Name is your full email address
**Password is the same password that you are using for email
|-
|
*For Outgoing Mail Server:
**Host name: mail.domain.tld (for example mail.ctfn.ca)
**User Name is your full email address
**Password is the same password that you are using for email
*Click Next and your email should be ready
*Recommended : send an email to your self to check and make sure all settings are working
|[[File:Iphoneemail7.JPG|centre|450x450px]]
|}

==Email Settings==
====Computerisms Hosted Email====
*IMAP: configure using SSL (port 993) Server: [[Domain Substitution|mail.yourdomain.tld]]
*POP3: configure using SSL (port 995) Server: [[Domain Substitution|mail.yourdomain.tld]]
*SMTP: Server:[[Domain Substitution|mail.yourdomain.tld]]
**Port 465: With Authentication using incoming user/pass and SSL/TLS
***Our email hosting uses Port 465 and SSL/TLS for SMTP
*Thunderbird Users: our mail servers are set up in a way that Thunderbird should find all this information automatically, all you need to do is enter your Name, Email Address, and Password in the Add Email Account Wizard.
*Outlook Users: Outlook may not be able to find this info automatically, so you may have to key it in manually.

==Server Side Filters==
Server Side Message Filtering can be used by any program supporting the SIEVE protocol
*NOTE: Computerisms has Server Side Filtering disabled by default, please contact us to enable it
**Enabling this feature will disable the ability to do forwarding and autoreplies in [https://manage.computerisms.ca Qmailadmin]
**Qmailadmin is easier to use, Server Side Filtering provides more features and control
*The [http://sieve.info/ Sieve Protocol] is a platform independent method of filtering your mail
**This is commonly done using "Message Rules" or similar on email clients such as Thunderbird and Outlook, but your program needs to download the messages in order to filter them
**In this case, the server does the filtering so it can drop the mail in the correct folder before your email client knows it is there
**Sieve Protocol also allows for other features, such as Out of Office replies, forwarding, and copying.
***Be sure to include rules pertaining to BULK mail if you subscribe to mailing lists and want to use Out of Office replies
*[[Round Cube#Server Side Message Filtering|RoundCube]] can be used to implement Server Side Filters
*SquirrelMail also supports Server Side Filtering, just click on the coffee filter icon after you log in
*There is also a [https://addons.mozilla.org/en-US/thunderbird/addon/sieve/ a Thunderbird Plugin], but it's a bit complicated to use

==Mail Management (For our hosting)==
*[[QmailAdmin Management|Manage your email accounts, passwords, mailing lists, and more]]

File:OutlookC4.png

2021-04-20T23:09:13Z

Mohit:

File:OutlookC3.png

2021-04-20T23:08:43Z

Mohit:

File:OutlookC2.png

2021-04-20T23:07:25Z

Mohit:

File:OutlookC1.png

2021-04-20T23:06:49Z

Mohit:

File:Bluemail7.jpeg

2021-04-20T23:05:46Z

Mohit:

File:Bluemail6.jpeg

2021-04-20T23:05:15Z

Mohit:

File:Bluemail5.jpeg

2021-04-20T23:04:29Z

Mohit:

File:Bluemail4.jpeg

2021-04-20T23:03:36Z

Mohit:

File:Bluemail3.jpeg

2021-04-20T23:02:19Z

Mohit:

File:Bluemail2.jpeg

2021-04-20T23:01:42Z

Mohit:

File:Bluemail1.jpeg

2021-04-20T23:00:30Z

Mohit:

Email

2021-04-20T21:28:40Z

Mohit: /* Email Settings */

==Instructions For Configuring Email Clients==
{| style="width: 100%; border-spacing:15px;border-collapse:separate;border: 1px solid rgb(191, 238, 255); background-color: rgb(255, 235, 205);text-align:center;font-size:1.5em;"
|- valign="center"
| [[file:thunderbird_logo.png|link=https://help.computerisms.ca/Thunderbird|75px]]
|| [[file:Outlook.png|link=https://help.computerisms.ca/Outlook|75px]]
||
|-
| [[Thunderbird|Thunderbird]]
|| [[Outlook|Outlook]]
||
|}

==How to setup your email on iPhone==
{| style="width:100%" border="0" cellspacing="75" cellpadding="20" style="font-size:120%;
|-
|style="width: 50%"|
*Navigate to your settings and select the Mail, Contacts, Calenders settings
|[[File:Iphoneemail1.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail2.JPG|centre|450x450px]]
|
*Select Add Account
|-
|
*Select "Other" to add a POP3 or IMAP account
|[[File:Iphoneemail3.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail4.JPG|centre|450x450px]]
|
*Choose Add Mail Account
|-
|
*Enter your Name, Email, Password and a Description
*Click Next
|[[File:Iphoneemail5.JPG|centre|450x450px]]
|-
|[[File:Iphoneemail6.JPG|centre|450x450px]]
|
*For Incoming mail server
**Host name: mail.domain.tld (for example mail.ctfn.ca)
**User Name is your full email address
**Password is the same password that you are using for email
|-
|
*For Outgoing Mail Server:
**Host name: mail.domain.tld (for example mail.ctfn.ca)
**User Name is your full email address
**Password is the same password that you are using for email
*Click Next and your email should be ready
*Recommended : send an email to your self to check and make sure all settings are working
|[[File:Iphoneemail7.JPG|centre|450x450px]]
|}

==Email Settings==
====Computerisms Hosted Email====
*IMAP: configure using SSL (port 993) Server: [[Domain Substitution|mail.yourdomain.tld]]
*POP3: configure using SSL (port 995) Server: [[Domain Substitution|mail.yourdomain.tld]]
*SMTP: Server:[[Domain Substitution|mail.yourdomain.tld]]
**Port 465: With Authentication using incoming user/pass and SSL/TLS
**Port 587: With Authentication using incoming user/pass and STARTTLS
***Our email hosting uses Port 587 and STARTTLS for SMTP
*Thunderbird Users: our mail servers are set up in a way that Thunderbird should find all this information automatically, all you need to do is enter your Name, Email Address, and Password in the Add Email Account Wizard.
*Outlook Users: Outlook may not be able to find this info automatically, so you may have to key it in manually.

==Server Side Filters==
Server Side Message Filtering can be used by any program supporting the SIEVE protocol
*NOTE: Computerisms has Server Side Filtering disabled by default, please contact us to enable it
**Enabling this feature will disable the ability to do forwarding and autoreplies in [https://manage.computerisms.ca Qmailadmin]
**Qmailadmin is easier to use, Server Side Filtering provides more features and control
*The [http://sieve.info/ Sieve Protocol] is a platform independent method of filtering your mail
**This is commonly done using "Message Rules" or similar on email clients such as Thunderbird and Outlook, but your program needs to download the messages in order to filter them
**In this case, the server does the filtering so it can drop the mail in the correct folder before your email client knows it is there
**Sieve Protocol also allows for other features, such as Out of Office replies, forwarding, and copying.
***Be sure to include rules pertaining to BULK mail if you subscribe to mailing lists and want to use Out of Office replies
*[[Round Cube#Server Side Message Filtering|RoundCube]] can be used to implement Server Side Filters
*SquirrelMail also supports Server Side Filtering, just click on the coffee filter icon after you log in
*There is also a [https://addons.mozilla.org/en-US/thunderbird/addon/sieve/ a Thunderbird Plugin], but it's a bit complicated to use

==Mail Management (For our hosting)==
*[[QmailAdmin Management|Manage your email accounts, passwords, mailing lists, and more]]

Main Page

2021-04-20T21:27:33Z

Mohit:

Welcome to the Computerisms Help Pages
[http://www.computerisms.ca/ RETURN TO COMPUTERISMS HOME PAGE]
These pages will always be a work in progress, I will add to them as I can... If you desire to see certain instructions documented here, please [mailto:bob@computerisms.ca let me know]

{| style="width: 100%; border-spacing:15px;border-collapse:separate;" cellpadding="10"
|- valign="top"
|colspan="6" style="border: 1px solid rgb(191, 238, 255); background-color: rgb(000, 255, 255);text-align:center;font-size:1.5em;"| '''Getting Support'''

Contact Computerisms at 867-334-7117; or you can [mailto:bob@computerisms.ca email instead]


Telephone Support for Basic Hosting (Email and FTP) is free

Email and FTP are both very mature technologies and most problems can be solved quickly without scheduling a visit. If a visit is required and the problem is not due to a malfunction in the hosting service, [http://www.computerisms.ca/index.php/business-network-management hourly billing] will be applied.

Support for Advanced Hosting is [http://www.computerisms.ca/index.php/business-network-management billable by the hour]

CalDAV/CardDAV/WebDAV are implemented differently on each device and/or program. This requires much more skill and time to troubleshoot problems.

If it turns out a problem is found on one of our servers, it will not be billed.

|- valign="top"
|colspan="3" style="width:50%;border: 1px solid rgb(191, 238, 255); background-color: rgb(248, 102, 76);text-align:center;font-size:1.5em;" | [[file:mail.png|75px]]
[[Email|Email Settings]] 
[[Spam|Spam Filtering]] 
[[QmailAdmin Management|Manage Email Accounts and Mailing Lists]] 

|colspan="3" style="width:50%;border: 1px solid rgb(191, 238, 255); background-color: rgb(88, 137, 184);text-align:center;font-size:1.5em;"| [[file:con_cal.png|75px]]
[[Calendar|Calendar Server Configuration]] 
[[Shared Address Book|Contacts Server Configuration]] 

|- valign="top"
|colspan="3" style="width:50%;border: 1px solid rgb(191, 238, 255); background-color: rgb(55, 181, 98);text-align:center;font-size:1.5em;"| [[file:file.png|75px]]
[[Fetch|Large File Transfers through Email (Fetch)]] 
[[Files|Online File Storage]] 

|colspan="3" style="width:50%;border: 1px solid rgb(191, 238, 255); background-color: rgb(248, 164, 76);text-align:center;font-size:1.5em;"| [[file:doc.png|75px]]
'''COMING SOON'''

|- valign="top"
|colspan="2" style="width:33%;border: 1px solid rgb(191, 238, 255); background-color: rgb(255, 235, 205);text-align:center;font-size:1.5em;"| '''Certificates / Tech Stuff'''
[[Security Certificates|The Certificate Warnings Issue]] 
[[Daily Bandwidth Report|Daily Bandwidth Report]] 
[[IPUPDATE]] 
[[Backup.bat]] 
[[mod_auth_imap for apache2.4 patch]] 
[[Windows 10 tips and tricks]] 

|colspan="2" style="width:33%;border: 1px solid rgb(191, 238, 255); background-color: rgb(192, 192, 192);text-align:center;font-size:1.5em;"| '''VPN Instructions'''
[[VPN Clients Using Certificates]] 
[[VPN Clients Using Pre-Shared Keys]] 
[[Connecting Mac to a File Server]] 
[[Connecting Android Device to a File Server]] 
[[Connecting iOS Device to a File Server (for Video/Audio Playback)]] 

|colspan="2" style="width:33%;border: 1px solid rgb(191, 238, 255); background-color: rgb(255, 235, 205);text-align:center;font-size:1.5em;"| '''Client Configuration'''
[[Roundcube]] 
[[SquirrelMail]] 
[[Thunderbird]] 
[[Outlook]] 
|}