O'Reilly logo

Windows Server 2012 Unified Remote Access Planning and Deployment by Bala Natarajan, Erez Ben-Ari

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

PKI

As we said earlier, URA can work fine without deploying your own certificate infrastructure by using the Kerberos Proxy. There are, however, circumstances where you will not be able to use it. Such a situation is when you need to have Windows 7 clients use URA. The code that runs the connection on Windows 7 computers cannot work with the Kerberos Proxy, and so these clients will require their own certificates in order to launch the IPsec tunnel, and this means that you will have to configure a full PKI infrastructure to support these clients.

Another situation is one with organizations that already have a PKI deployed and would rather use it instead of the self-signed certificates generated by the URA role, or instead of the Kerberos Proxy ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required