Community discussions

 
akarpas
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 51
Joined: Tue Mar 20, 2018 4:46 pm

IPsec IKE2 can find valid sertificate

Sun Sep 16, 2018 5:50 pm

Setting up ikev2 road worrior set up. Following step on mikrotik wiki.
Cteated CA signed, created server cert signed with CA, created windows client cert signed with CA.
Exported windows client cert and installed on windows 10 .
No matter what i do getting error ike failed to find vald cert on local machine.
 
Sob
Forum Guru
Forum Guru
Posts: 3428
Joined: Mon Apr 20, 2009 9:11 pm

Re: IPsec IKE2 can find valid sertificate

Sun Sep 16, 2018 6:30 pm

On Windows, do you have the certificate in "local machine" store? If you put it in "local user" store, which I definitely did at first, because it was more logical when I wanted VPN only for that one user, it doesn't work.
 
akarpas
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 51
Joined: Tue Mar 20, 2018 4:46 pm

Re: IPsec IKE2 can find valid sertificate

Mon Sep 17, 2018 4:37 pm

On Windows, do you have the certificate in "local machine" store? If you put it in "local user" store, which I definitely did at first, because it was more logical when I wanted VPN only for that one user, it doesn't work.
Cert is installed on local machine not user
 
akarpas
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 51
Joined: Tue Mar 20, 2018 4:46 pm

Re: IPsec IKE2 can find valid sertificate

Mon Sep 17, 2018 4:38 pm

Could someone show all steps creating certs for ikev2 for windows 10
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 5659
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: IPsec IKE2 can find valid sertificate  [SOLVED]

Mon Sep 17, 2018 4:55 pm

You need to import also CA, not just client cert.
 
akarpas
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 51
Joined: Tue Mar 20, 2018 4:46 pm

Re: IPsec IKE2 can find valid sertificate

Tue Sep 18, 2018 1:18 am

You need to import also CA, not just client cert.
you are 100% right this what i have done today and it works perfectly, you just confirmed it and you are right as always, really appreciate your input.

Who is online

Users browsing this forum: CP4U, kaweksl, mducharme and 34 guests