VPN Clients Using Certificates

• Actions Listed in {Curly Braces} may *not* be present, depending on the configuration of your computer

Using Windows 7 (Adaptable to Windows 8)

1. Navigate to the Control Panel=>{Network and Internet}=>Network and Sharing Center=>Select "Set up a new connection or network"
2. Select "Connect to a workplace"=>Next=>{Select "No, Create a new connection"}=>Select "Use my Internet connection (VPN)"
3. In the "Internet Address" field, enter the hostname or IP address of your company firewall provided to you by your company
4. The "Destination Name" field requires an arbitrary value that identifies what you are connecting too (IE put anything that identifies to you personally what you are connecting too)
   1. If you are unsure what to put in this field, use your Company's Name
5. Click Next=>Enter the Username provided to you=>Enter the Password provided to you
6. Click Connect=>Let the connection fail (this may take a while)=>Click "Set up the connection anyway"
7. In the lower-right corner of your screen by the clock, click the network icon
8. The value you entered for "Destination Name" above will be listed here=>right click it=>Choose properties=>Select the "Security" tab
9. Set "Type of VPN" to "Layer 2 Tunneling Protocol with IPSec (L2TP/IPSec)
10. Click the button called "Advanced"=>Select "Use preshared key for authentication"=>Enter the Pre-Shared Key provided to you by your company=>Click OK
11. Set "Data encryption" to "Optional encryption (connect even if no encryption)"
12. Under "Authentication", ensure "Allow these protocols is selected=>Ensure "Unencrypted Password (PAP) is deselected=>Ensure "Challenge Handshaek Authentication Protocol (CHAP)" is selected
    1. "Microsoft CHAP Version 2 (MSCHAP v2)" can be selected or deselected, but "Automatically use any Windows logon name and password" should not be selected
13. Click OK
14. In the lower-right corner of your screen by the clock, click the network icon=>Select the same connection=>Click Connect=>{Click Connect}
    1. A Note on saving passwords: do not save the password unless you are the only one using this computer, instead enter it every time you connect

Using a Mac

• I would generally discourage trying to get certificates working on a Mac. if it can be made to work, it is certainly a dauntingly technical task that seems to get harder with every release of the Mac OS X operating system.