Hi,

I have IKEv2 with cert up and running. Everrthig is working as it should but I have a problem on Win10 1803 machines (maybe also other Win versions).
The config is based on:
https://wiki.mikrotik.com/wiki/Manual:I ... entication

I manage multiple clients and all of the have IKEv2 VPN with certs.
My Win10 client sends the wrong certificate to different VPN Servers. How can I select which cert to use (like on IPAD od Strongswan).
The certs are imported in machine store.. But How can I select which one to use.
Anybody else expirienced and solved this problem?


Regards
Huntah

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.
Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.

Code: Select all

Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'

Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!

Could you or someone explain more as this is didnt work for me

What was the error?
You need PowerShell and not CMD.
It wont work if you have the same CA. I havent tried to specify which cert to use with the same CA (Certificate Authority).

This is useful if you have multiple IKEv2 VPN clients on different locations. And all the servers have different CA.

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.

Code: Select all

Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'

Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!

Could you or someone explain more as this is didnt work for me

sorted out all works thank you

Tell me please, how to do it for Win7 Pro ?

Hi,

I have found the solution if someone should came accros the same problem.
So the solution is to use powerShell and specify the CA to use:
here is the example.

Code: Select all

Set-VpnConnection -Name "My VPN Connection" -MachineCertificateIssuerFilter 'C:\mycerts\cert_export_MikrotikIKEv2-CA.crt'

Now I can have multiple IKEv2 VPN Clients on my Windows Machine.
Maybe an WiKi Update would not be also good because lots of people are using IKEv2 More and More!

Thank you sir. That works very well.

Tell me please, how to do it for Win7 Pro ?

Hello, I have the same question