In fact, talking about how to apply for the certificate under the TMG for Sstp_vpn, in many cases we are entering the Certificate Application page, apply for the same certificate as your external VPN public domain name, this kind of article on the internet there are a lot of here I will not introduce again, What I want to talk about here is that if there are more than one external VPN server in the company, if we apply to each one once, it is a bit tedious, can we apply for a generic multiple host header certificate as we did on Exchange? So I can save only one certificate, so that a certificate contains all the VPN server to publish the domain name, so that not only simplifies the operation and ultimately we only need to maintain a certificate to save a good.
Let me explain how to use Exchange PowerShell to help us complete the application for Sstp_vpn common multihomed header names Certificate:
Step One: Use Exchange PowerShell to generate a multihomed header certificate with the following command format:
New-exchangecertificate-subjectname "C=cn,s=beijing,o=test,cn=vpn.test.com"-
DomainName vpn1.test.com,vpn2.test.com,-friendlyname certsrvvpn-generaterequest: $True-Keysize 2048-p
Rivatekeyexportable $true | Set-content-path "C:\certsrvvpn\certsrvvpn.req"
Step Two:
1. Log on to the Certificate page and click the "Submit a certificate ..." link in the page shown in the following illustration.
2. Please open the previously stored certificate file in Notepad and select all the contents, copy and paste to the "Saved Request" section of the page shown in the following illustration, select "Web Server" in the "Certificate Template" column, and then click The Submit button.
This column more highlights: http://www.bianceng.cnhttp://www.bianceng.cn/Network/Firewall/