Page 1 of 1

Use both Client Certificate and Password

Posted: Wed Apr 11, 2018 1:31 pm
by rkheria
I want to setup VPN server such that
1. Users can connect to VPN using only specific laptop, and not their own devices. (I think certificates will get that)
2. If the laptop is stolen or someone else gets access to it, VPN that person cannot connect to VPN. (I think password will get that)

Please tell me if I have thinking in the wrong way.

I was thinking that I can achieve that by installing Client certificates only on those laptops and the users would have to supply a password also. That ways users will not be able to connect to VPN from their own computers as that will not have the certificate.

How can I setup VPN with those requirements.

Thank you

Re: Use both Client Certificate and Password

Posted: Fri Apr 27, 2018 3:36 am
by thisjun
I think certificates can be copied to another computer.
So, certificates can't satisfy first condition.

For second condition, please use password auth with following way.
http://www.softether.org/4-docs/1-manua ... tion_Fails