When a DirectAccess client computer builds its IPsec tunnels back to the corporate network, it has the ability to require a certificate as part of that authentication process. In earlier versions of DirectAccess, the one in Server 2008 R2 and the one provided by Unified Access Gateway (UAG), these certificates were required in order to make DirectAccess work. Setting up the certificates really isn't a big deal at all. As long as there is a CA server in your network, you are already prepared to issue the necessary certificates at no cost. Unfortunately, though, there must have been enough complaints back to Microsoft in order for them to make these certificates recommended instead of required, and they created a new mechanism in Windows 8 and Server 2012 called Kerberos proxy that can be used to authenticate the tunnels instead. This allows the DirectAccess tunnels to build without the computer certificate, making...
Windows Server 2016 Security, Certificates, and Remote Access Cookbook
By :
Windows Server 2016 Security, Certificates, and Remote Access Cookbook
By:
Overview of this book
<p>Windows Server 2016 is an operating system designed to run on today’s highly performant servers, both on-premise and in the cloud. It supports enterprise-level data storage, communications, management, and applications. This book builds off a basic knowledge of the Windows Server operating system, and assists administrators with taking the security of their systems one step further. </p>
<p>You will learn tips for configuring proper networking, especially on multi-homed systems, and tricks for locking down access to your servers.</p>
<p>Then you will move onto one of the hottest security topics of the year – certificates. You will learn how to build your own PKI, or how to better administer one that you already have. You will publish templates, issue certificates, and even configure autoenrollment in your network.</p>
<p>When we say “networking” we don’t only mean inside the LAN. To deal safely with mobile devices, you will learn about the capabilities of Windows Server 2016 for connecting these assets securely back into the corporate network, with information about DirectAccess and VPN. </p>
<p>The material in the book has been selected from the content of Packt's Windows Server 2016 Cookbook by Jordan Krause to provide a specific focus on these key Windows Server tasks.</p>
Related Content you might be interested in
Current Title:
Windows Server 2016 Security, Certificates, and Remote Access Cookbook
Table of Contents (9 chapters)
Title Page
Packt Upsell
Contributors
Preface
Free Chapter
Security and Networking
Working with Certificates
Remote Access
Other Books You May Enjoy
Index
Customer Reviews